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The  road  to  virtualization  now 


Infrastructure 


DATA  CENTERS  ON  DEMAND 


7  Principles  of  InfraStruXure®  HD-Ready  Architecture. 

1  Rack  enclosures  that  are  HD-Ready 

Start  with  vendor  neutral  NetShelter®  SX  racks,  engineered  to  handle 
the  airflow  and  power  needs  of  power-hungry,  high-density  servers. 


You  can  deploy  High  Density 


2  Metered  PDUs  at  the  rack  level 

Install  metered  rack  PDUs  to  indicate  which  racks  and  outlets  have  capacity  for  new  HD  servers. . . 
and  which  ones  don't. 


...overlay  an  InfraStruXure  zone 
into  an  existing  large  data  center... 


3  Temperature  monitoring  in  the  racks 

Add  local  or  remote  monitoring  of  temperature  and  humidity  where  it  counts-in  your  enclosures. 

4  Centralized  Monitoring  Software 

Monitor  all  power,  cooling,  security,  and  environments  from  one  management  system  using  real¬ 
time  data  at  the  row,  rack,  and  U-level. 

5  Operations  software  with  predictive  capacity  management 

Conventional  operations  software  simply  manages  inventory  fluctuations  and  configuration 
changes.  Our  capacity  management  software  does  this  and  more-simulating  and  predicting  the 
true  impact  a  new  server  or  other  equipment  will  have  on  your  power  and  cooling  infrastructure. 
Only  through  predictive  simulation  can  you  avoid  overloading 
circuits  and  generating  hot  spots. 

6  Efficient  InRow®  cooling  products 

Innovative,  responsive  variable  speed  fans  optimize  efficiency 
by  closely  matching  performance  to  your  variable  cooling  needs. 

7  UPS  power  that  is  flexible  and  scalable 

Respond  quickly  and  efficiently,  without  wasteful  oversizing,  as  UPS  power  demand  grows. 
Depending  on  your  needs,  choose  a  scalable  row,  in-room,  or  back  room  UPS  solution. 


APC's 

Capacity  Manager 

has  received  a 
2007  Data  Center 
Products  of  the  Year 
Gold  Award  from 
Searchdatacenter.com 


Running  a  large  data  center  facility  is  challenging  enough 
without  the  intense  pressures  on  power,  cooling  and  management 
caused  by  high-density  computing  and  exacerbated  by  virtualiza¬ 
tion.  The  flexible  InfraStruXure  architecture  allows  you  to  identify 
your  specific  areas  of  high  density  computing  and  "overlay"  the 
InfraStruXure  zone  -  no  matter  the  size  or  configuration.  Not  only  is 
InfraStruXure  compatible  with  all  leading  IT  brands,  but  also  with 
any  and  all  existing  power  and  cooling  architectures.  Neutralize 
and  manage  high-density  zones  in  your  existing  facility  that  would 
otherwise  be  too  hot  to  cool  with  perimeter-only  solutions. 


las  a  high  speed  lane 


The  following  have  been  tested  and  work 
best  with  InfraStruXure  Solutions... 


Efficiency  8  Virtualization 

iur  servers  are  efficient,  but  is  your  power  and  cooling? 


COOLING 

Bl  USAGE/CAPACITY 


SERVERS 
,  POWER 

I  USAGE/CAPACITY 


tire-Server  Virtualization 


Big  gains  could  be  made  with  both 
server  and  power  and  cooling. 


]  Correct  Server  Utilization 
]  Correct-sized  Power 
]  Correct-sized  Cooling 

ost-Server  Virtualization 

f  Correct  Server  Utilization 
]  Correct-sized  Power 
]  Correct-sized  Cooling 


Efficiency 


Grossly  oversized  power  and  cooling  cancels 
out  potential  gains  made  by  virtualizing. 
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SH/er  Virtualization  with  Power  and  Cooling 

ght-sized  power  and  cooling  tip  the  balance  back  in  your  favor. 

i  Correct  Server  Utilization 
f  Correct-sized  Power 
i  Correct-sized  Cooling 


Cooling  with  InRow®  leads  to  highest  efficiency... 

Gain  thermal  efficiency  with  our  InRow  cooling  products. 
Closely  coupling  the  AC  with  the  heat  source  reduces  the 
distance  cold  air  must  travel  (from  50  feet  down  to  5  feet), 
prevents  hot  exhaust  air  from  mixing  with  cool  air  in  the  room, 
and  allows  more  targeted  precision  cooling. 


a  H  .  Efficiency  Index:  According  to  the  Green  Grid, 

•  ■  ■  efficiency  is  based  on  the  relative  relationship  between 

"  ■  ■  the  green  grid '  server  utilization  and  the  overall  power  and  cooling 
efficiency.  If  you  right-size  one  without  the  other,  you 
won't  realize  true  efficiency  gains. 


(HD)  racks  right  now... 

,  ...or  deploy  InfraStruXure 
as  the  foundation  of  your 
entire  data  center  nr  server  ronm. 


As  technology  shifts  toward  high  density,  forward-thinking  IT 
managers  are  laying  basic  HD  framework  in  place,  so  they  can 
respond  quickly  to  future  change.  InfraStruXure  is  a  simple  yet 
dynamic  drop-in  solution  that  can  be  quickly  scaled  up  to  higher 


Virtualization  is  here  to  stay. 

And  it's  no  wonder,  since  it  saves  space,  reduces  power  consumption 
and  gives  the  flexibility  and  control  to  maximize  your  IT  resources.  But 
these  benefits  of  a  smaller  footprint  come  at  a  cost.  Virtualized  servers, 
even  at  50%  capacity,  require  special  attention  to  cooling,  no  matter  the 
size  of  the  zone,  system,  or  overall  data  center. 

1 .  Heat  Server  consolidation  creates  higher  densities  per  rack.  This,  in  turn, 
generates  more  and  more  heat,  putting  your  equipment  and  overall  system 
at  risk  for  downtime  and  failure. 

2.  Inefficiency  Perimeter-only  cooling  solutions  just  can't  handle  the  heat 
at  its  source  in  the  racks  or  rows  where  higher  densities  exist.  As  a  result, 
you're  forced  to  compensate  by  over  cooling  at  high  energy  costs-with 
disappointing  results. 

3.  Power  Events  Virtual  loads  are  constantly  on  the  move,  making  it  hard  to 
predict  available  power  and  cooling.  One  tripped  breaker  could  mean 
serious  and  irreversible  damage  to  your  network. 

Removes  barriers  to  high  density,  for  good. 

Power  and  cooling  issues  driven  by  high  density  shouldn't  stop  you 
from  adopting  valuable  trends  like  virtualization. This  is  why  APC  has 
created  the  HD-Ready  InfraStruXure  architecture.  As  a  stand-alone 
system  or  as  a  zone  within  your  existing  data  center,  InfraStruXure 
gets  you  to  the  next  level. 

Simple  to  design,  configure,  and  install,  HD-Ready  InfraStruXure 
architecture  lets  you  decide  when  and  where  to  handle  higher 
densities,  in  a  specific  zone  or  system-wide.  Now,  with  HD-Ready 
InfraStruXure,  you  can  get  cooling  into  the  virtualized  high-density  row, 
control  power  at  the  rack  level,  and  manage  the  system  through 
advanced  software  and  simulation,  which  alerts  you  to  potential 
threats  to  a  virtualized  environment. 

Take  the  right-sized  approach  to  true  efficiency. 

You're  virtualizing  to  reduce  overall  energy  consumption.  By  eliminat¬ 
ing  under-utilized  servers  (sometimes  at  a  7:1  ratio)  you  will  waste 
less  energy.  But  wait....  data  center  efficiency  depends  on  the  relative 
efficiencies  of  power,  cooling,  and  servers.  You  can't  right-size  one  and 
not  the  others.  If  you  do,  you've  just  left  your  efficiency  savings  on  the 
table  (See  "Efficiency  and  Virtualization"  to  the  left). 

To  right-size,  you  can  depend  on  the  efficient  and  modular  HD-Ready 
InfraStruXure.  Its  UPS  technology,  combined  with  our  one  of  a  kind 
row  based  cooling  technology  with  optional  hot  aisle  containment,  will 
neutralize  heat  at  the  source.  Your  equipment  will  be  safer  and  more 
efficient  running  closer  to  100%  capacity.  No  more  threats  to  equip¬ 
ment,  no  more  under-utilized,  oversized  power  and  cooling. 

Don't  agonize,  virtualize. 

What  are  you  waiting  for?  The  APC 
HD-Ready  InfraStruXure  architecture  is 
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Square  D®  is  a  market-leading  global 
brand  of  Schneider  Electric  for  NEMA 
type  electrical  distribution  and  industrial 
control  products,  systems  and  services. 


t.a.o 

TAC  provides  building  environment 
services  for  indoor  climate,  security  and 
energy  use,  via  advanced  technology  to 
end-users  and  property. 


D0LL 

Dell  is  a  global  systems  and  services 
company  offering  a  broad  range  of  product 
categories  including  desktop  computer 
systems,  servers  and  networking  products, 
mobility  products,  software  and  peripherals 
and  enhanced  services. 


Cisco,  the  leading  supplier  of 
networking  equipment  and 
network  management  for  the 
internet  recognises  APC  as  a 
Cisco  Technology  Developer 
Program  partner  for  its 
InfraStruXure®  architecture. 

Microsoft 

APC  is  proud  to  be  recognized  as  a 
supporter  of  the  Microsoft  Technology 
Centers  throughout  the  U.S.  with  our 
InfraStruXure  solution. 


Pelco  is  a  worldwide  leader  in  the  design, 
development  and  manufacturing  of  video 
security  systems. 
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SELECT 


APC  is  a  member  of  the 
EMC  Select  program  which 
offers  the  InfraStruXure 
product  line  to  complete 
your  EMC  Storage  Solution. 


ALLIANCE 

PARTNER 


The  largest  computer  company  in 
the  world,  IBM  manufactures  and 
sells  hardware  and  software  and 
offers  infrastructure  services,  hosting 
services,  and  consulting  services 
in  areas  ranging  from  mainframe 
computers  to  nanotechnology. 

0.™,.  I  technology  alliance 

vmware  |  partner 

VMware  is  the  global  leader  in 
virtualization  solutions  from  the  desktop 
to  the  data  center. 

Go  to  www.xcompatible.com  to  learn 
more  about  how  these  products  work 
with  InfraStruXure's  High  Density 
solutions. 


density.  When  you're  ready,  go  from  low  to  high  density  by 
adding  enhanced  monitoring,  power  and  temperature  control, 
software  management,  and  higher  capacity  AC  units. 

If  you're  already  feeling  the  heat  from  high  density  driven  by 
virtualization,  the  InfraStruXure  HD-Ready  System's  row  based 
cooling  and  management  will  allow  you  to  handle  20kw  or 
more  per  rack  and  deliver  system-wide  visibility  and  control. 
The  standardized  architecture  lets  you  grow  modularly  over 
time,  or  virtualize  anywhere  and  anytime  you  need  to. 


so  versatile,  anyone  can  virtualize,  any-  - 

time,  anywhere.  Just  drop  it  in  and  go.  by  Schneider  Electric 


Why  do  leading  companies  prefer  InfraStruXure  6  to  1  over  traditional 
data  center  designs?  Find  out  at  www.xcompatible.com 


©2008  American  Power  Conversion  Corporation.  All  trademarks  are  owned  by  Schneider  Electric  Industries  S.A.S., 
American  Power  Conversion  Corporation,  or  their  affiliated  companies, 
e-mail:  esupport@apc.com  132  Fairgrounds  Road,  West  Kingston,  Rl  02892  USA  998-1256 


Download  a  FREE  copy 
of  APC  white  paper  #126: 

"An  Improved  Architecture 
for  High-Efficiency,  High  Density 
Data  Centers"  and  start  running 
more  efficiently  today! 

Visit  www.apc.com/promo 
Enter  Key  Code  c651w 
Call  888-289-APCC  x96Q7 
Fax  401-788-2797 
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IN  THE  WORLD  OF  ENTERPRISE  INTEGRATION 

I  need  a  solution  that  runs  like  clockwork  or  I  run  the  risk  of  running  a  lot  of  stairs. 


The  Canon  Color  imageRUNNER 
PRODUCE.  PERSUADE.  PERFORM.  ON  THE  NETWORK. 


e  R  U  N  N  ER® 


www.usa.canon.com  1-800-OK-CANON 

■  Canon  and  IMAGERUNNER  are  registered  trademarks  of  Canon  Inc.  in  the  United  States  and  may  also  be  registered  trademarks  or  trademarks  in 
other  countries.  IMAGEANYWARE  is  a  trademark  of  Canon.  ©  2008  Canon  U.S.A.,  Inc.  All  rights  reserved.  Product  shown  with  optional  accessories. 
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THINK  GREEN. 


3PAR  customers  can  buy  half  the  storage  capacity  required  with 
traditional  storage  arrays,  reducing  energy  consumption  and 
the  related  toxic  impact  on  the  environment. 


With  Carbon  Neutral  Storage,  3PAR  purchases  carbon  offsets  for 
the  disk  capacity  sold  with  Thin  Provisioning.  So  far  this  program 
has  offset  nearly  1 1,000  metric  tons  of  carbon  emissions  — 
equivalent  to  taking  2,100  cars  off  the  road  for  a  year. 


Get  a  Free  Report  on  Increasing  Data  Center  Efficiency: 

www.3PAR.com/thinkgreen 


3  PAR 

Serving  Information 


Think  Thin.  Think  Green.  Think  3PAR. 
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24  How  to  Sell  Security 

think  tank  We  don’t  invest  in  information 
security  because  we’re  predisposed  to  take  the 
risk  that  nothing  bad  will  happen.  So  if  you 
want  to  sell  security  to  senior  management, 
turn  it  into  something  people  actually  want  to 
buy.  By  Bruce  Schneier 

64  Five  Things  I've  Learned 

THE  VOICE  OF  EXPERIENCE  William 
Cohen,  author  of  A  Class  with  Drucker,  shares 
the  lessons  in  leadership  and  management  he 
learned  from  working  with  the  great  strategic 
thinker. 


more  » 


28  The  Price  of  Gas 

cover  story  |  business  intelligence  Every  day,  oil 
companies  harness  gushers  of  data  to  set  rates  for  a  gallon  of  gas. 
Learn  how  they  match  the  right  tools  with  information  to  maximize 
profits.  By  Kim  S.  Nash 

44  Wyeth's  Rx  for  BPM  Success 

business  process  management  The  drug  giant  laid  the 
groundwork  for  early  success  by  putting  business  process  ahead  of 
technology.  By  David  F.  Carr 

ss  How  Small  Companies  Can 
Make  a  Big  Impact  With  ITIL 

mid-market  The  IT  Infrastructure  Library’s  best  practices  and 
processes  help  organizations  get  value  from  their  information 
systems.  But  you  don’t  have  to  be  a  big  global  company  to  benefit 
from  ITIL.  By  Malcolm  Wheatley 


Wyeth  VP  of  Information  Ser¬ 
vices  Jazz  Tobaccowalla 
and  CIO  Jeffrey  E.  Keisling 
ensure  BPM  projects  have  a 
business  mandate. 
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Oil  companies  use  business  intelligence 
to  increase  profits.  You  can,  too. 
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The  greatest  virtualization  challenges 
are  yet  to  come.  Here’s  why  one  CIO 
says  you  should  focus  on  process 
management,  network  provisioning  and 
IT  organization  makeovers. 
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Microsoft  believes  SharePoint  gives  companies 
all  the  Web2.0they’ll  everneed.  Meanwhile,  IBM 
sees  its  social  software  suite  Lotus  Connections  as 
the  key  to  giving  users  the  col  laboration  features 
they  want  while  allowing  IT  to  hook  it  into  existing 
systems.  Learn  more  about  how  each  might  serve 
your  companies  needs  at: 

))  www.cio.com/article/357313  ))  www.cio.com/article/367613 


[DATA  MANAGEMENT] 

THE SEARCH  FOR TRUTH 
IN  MASSIVE  DATA  FLOWS 

Enterprisesarestruggiingtogetto“one 
version  of  thetruth"  with  master  data  man¬ 
agement.  A  new  Forrester  Research  report 
explains  theoverwhelming  adoption 
barriersandwhycompaniesare  failing. 

www.cio.com/article/372163 


ISONLINE  RESEARCH 
COSTING  YOU  MONEY? 

ASafari  Books  Online  survey  findsthat 
IT  professionals  spend  as  much  as 
two  hours  a  day  searchingthe  Webfor 
information  they  need  to  do  their  jobs. 
Unfortunately,  the  i  nformation  they  get 
isn't  always  accurate  and  leads  to  costly, 
embarrassingand  time-consuming 
mistakes. 

www.cio.com/article/373013 
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We’ve  added  eight  new 
speciality  newsletters 
covering  such  topics  as 
virtualization  and  Black- 
Berrys.  To  sign  up  or 
modify  your  existing  sub¬ 
scriptions,  visit:  www 
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PORTFOLIO  MANAGEMENT 


THINKING  ABOUT  PROJECT  AND 


ALTERNATIVt 


-critical 


Alternative  thinking  is 
processes,  risks,  resources  or  opportunities  flowing  throughout  your  business. 

It's  standardizing  process  with  precision,  prioritizing  how  you  spend  your  resources 
and  catapulting  from  business  objectives  to  reach  things  like,  say,  results. 

It's  invigorating,  adapting  and  extending  your  business  capabilities  with 
HP  Project  and  Portfolio  Management  solutions,  fortifying  that  little  bonus 
known  as  ROI. 


It's  staring  technology  obstacles  square  in  the  face,  turning  them  inside  out 
to  make  them  a  competitive  advantage. 


Technology  for  better  business  outcomes. 
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president  and  ceo  Michael  Friedenberg 

publisher  Bob  Melk 
publisher  emeritus  Gary  J.  Beach 


Black  Gold,  Green  IT 

Oil  companies  use  Bl  to  increase  profits.  You  can,  too. 

Four  dollars  a  gallon.  That  price  has  loomed 
large  for  consumers  and  economists  all  year, 
representing  an  inflection  point  beyond  which 
Americans  (both  corporate  citizens  and  the  reg¬ 
ular  kind)  might  actually  begin  to  change  their 
behavior  when  it  comes  to  the  consumption  of 
gasoline. 

In  our  cover  story,  “The  Price  of  Gas,”  begin¬ 
ning  on  Page  28,  Senior  Editor  Kim  S.  Nash 
explores  how  oil  companies  arrive  at  that  figure. 
It’s  not  easy.  Or  simple.  With  so  many  variable  factors  going  into  the  determina¬ 
tion— not  just  the  price  of  crude,  taxes,  refining  costs,  distribution,  marketing... but 
also  things  like  geopolitical  unrest  and  natural  disasters— oil  men  and  women  need 
powerful  tools  to  figure  out  how  to  ensure  the  greatest  profit. 

“Data  drives  what  we  do,”  says  Gary  Lensing,  VP  and  CIO  for  global  exploration 
and  production  at  Hess.  There  is  no  shortage  of  data  points,  writes  Nash;  but  to 
get  value,  oil  company  execs  need  to  interpret  what  all  that  data  means.  “It’s  about 
filtering  rather  than  finding  a  piece  of  information,”  says  David  Knapp,  a  senior 
editor  at  the  Energy  Intelligence  Group.  “Understanding  what  this  whole  pile  of 
stuff  can  do  for  you  is  the  key.”  Increasingly,  sophisticated  business  intelligence 
tools  provide  that  filtering  and  interpretation. 

Given  the  impact  that  the  rising  cost  of  fuel  is  having  on  just  about  everything 
that  requires  transport— or  power  or  energy  of  any  kind— we  the  citizens  (corporate 
and  otherwise)  could  use  our  own  set  of  BI  tools  to  start  managing  our  expenses 
and  pricing  going  forward. 

Smart  companies  will  certainly  do  so,  and  they’ll  use  the  insight  to  cut  out  exces¬ 
sive  costs.  Energy  efficiency  is  of  growing  interest  to  all  types  of  businesses,  but  as 
anyone  who  has  looked  at  “green”  technology  solutions  will  tell  you,  you  have  to 
spend  money  to  save  money.  In  a  technology  priority  survey  we  conducted  earlier 
this  year,  green  (or  energy-efficient)  IT  stood  out  as  the  second  least-invested-in 
technology  set,  with  only  12  percent  either  implementing  or  upgrading.  At  the  same 
time,  however,  a  full  47  percent  either  had  it  on  their  radar  (casual  interest)  or  were 
actively  researching.  I  guarantee,  if  energy  prices  keep  going  up,  those  companies 
are  going  to  move  quickly  into  investment  mode  in  the  years  ahead. 

And  as  we  all  get  more  energy  efficient,  that  will  be  just  one  more  factor  for  the 
oil  companies  to  take  into  account. 

Qtk 

Abbie  Lundberg,  Editor  in  Chief 

lundberg(a>cio.com 
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The  Changing  Face 
of  Outsourcing 

Cost  is  still  important,  but  a  recent  survey  finds 
that  CIOs  expect  business  value  and  quality  from 
trusted  outsourcing  providers  as  well 


■a  Outsourcing  deals  have  traditionally  been  viewed  through  the 
single  lens  of  cost  reduction,  and  given  today’s  economic  climate, 
it  wouldn’t  be  surprising  to  find  cost  the  overwhelming  concern 
for  CIOs  interested  in  outsourcing  IT  services.  But  a  recent  survey 
by  IDG  Research  Services  reveals  that  although  cost  is  important, 
CIOs  will  not  sacrifice  quality  and  value  to  save  money.  In  fact,  the 
majority  of  survey  respondents  report  an  increasing  emphasis  on 
business  value  and  quality  to  produce  a  new  era  of  outsourcing 
relationships. 

“The  days  of  outsourcing  as  a  pure  cost  play  are  gone,”  says  John  McKenna,  chief  strategy 
and  services  officer  at  CompuCom,  a  leading  North  American  IT  services  provider,  head¬ 
quartered  in  Dallas,  Texas.  “We  see  the  market  evolving  to  infrastructure  process  modeling 
and  implementation— very  much  like  business  processes  did  some  time  ago.  CIOs  want 
quality  and  business  value  from  their  outsourcing  partners.” 

The  increased  emphasis  on  value  and  quality  is  not  limited  to  outsourcing,  but  rather  is  one 
piece  of  a  strategy  aimed  at  improving  the  worth  of  IT  investments  in  general.  For  example, 
in  the  IDG  survey,  91  percent  of  respondents  say  they  want  to  increase  the  business  value  of 
their  IT  investments,  and  75  percent  want  to  improve  information  quality. 

The  survey,  which  asked  CIOs  and  IT  executives  at  midsize  and  large  enterprises  about 
trends  in  the  outsourcing  market,  found  that  outsourcing  has  emerged  as  a  powerful  tool  to 
improve  quality,  add  value  and  reduce  costs. 

“Quality  of  service  is  extremely  important,  as  well  as  improving  business  value,”  says  the 
head  of  technology  services  at  a  large  Midwestern  medical  institution.  “If  we  can  get  a 
cheaper  contract,  it  doesn’t  mean  we  won’t  take  it,  but  we’d  go  with  a  little  more  expensive 
deal  if  it  meant  the  quality  is  better.” 

Of  the  top  factors  driving  their  decision  to  outsource,  73  percent  of  respondents  cite  cost 
savings,  46  percent  point  to  the  need  to  focus  on  the  company’s  core  business  (a  value- 
driven  factor),  and  25  percent  say  that  improved  IT  effectiveness,  or  quality,  is  a  factor. 

Emerging  Trends  in  Outsourcing 

Survey  respondents  cite  the  importance  of  cost,  value  and  quality  in  assessing  outsourc¬ 
ing  services,  and  the  need  to  develop  formal  metrics  to  measure  service  providers.  For 
example,  with  the  opportunity  to  choose  more  than  one  factor,  88  percent  say  that  when 
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managing  IT  service  delivery,  controlling  IT  costs  is  critical  or  very  important,  while  84  per¬ 
cent  cite  the  quality  of  the  end-user  experience  as  critical  or  very  important. 

Outsourcing  providers  have  responded  to  these  demands  with  new  process  models  and 
service  delivery  options.  “IT  service  providers  operate  more  as  business  partners  with  many 
companies,”  says  McKenna.  “Outsourcing  providers  have  created  innovative  delivery  mod¬ 
els  designed  to  enhance  IT  quality  and  business  value.” 

One  of  the  most  significant  of  these  new  models  is  Infrastructure  as  a  Service  (laaS),  an 
on-demand  solution  that  integrates  hardware,  software  and  services.  laaS  allows  CIOs  a  new 
level  of  financial  flexibility  to  shift  a  greater  percentage  of  fixed  costs  to  variable  costs.  “It’s 
important  to  view  infrastructure  as  a  process  and  manage  it  like  a  service,”  says  McKenna. 

"If  you  are  a  CIO  and  can  tell  your  CFO  that  variabilizing  the  IT  delivery  model  will  allow  the 
company  to  easily  scale  operational  expenses  up  and  down,  that  has  real  business  value. 
Managing  infrastructure  as  a  service  allows  the  CIO  to  take  the  typical  IT  budget  from  a  70- 
30  fixed  cost/variable  cost  ratio  toward  a  more  balanced  50-50  ratio.” 


Because  there  is  no  longer  the  need 


Important  Factors  When  Managing  IT  Service 
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This  fact  is  not  lost  on  CIOs  in  the 
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and  28  percent  say  they  are  either 
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Source:  IDG  Research  Services,  March  2008 

The  benefits  of  moving  to  laaS, 

respondents  say,  include  a  reduc¬ 
tion  in  capital  expenses,  quicker  response  times,  operational  efficiency  and  scalability.  “It 
has  given  us  scalability  and  the  ability  to  focus  on  core  services,”  says  Tony  Hashem,  CTO 
for  end-user  services  at  Genworth  Financial  in  Lynchburg,  Va. 

When  it  comes  to  rating  potential  benefits,  survey  respondents  most  often  opt  for  value. 
Fifty-one  percent  cite  the  ability  to  improve  the  value  of  their  IT  investment  through  in¬ 
creased  ROI  as  the  benefit  most  likely  to  drive  consideration  of  on-demand  desktop  service 
or  laaS.  Forty-seven  percent  wish  to  reduce  capital  expenditures,  and  36  percent  cite  seal- 
ability  as  a  benefit. 

Remote  infrastructure  management  services  have  also  evolved  to  meet  changing  business 
needs,  as  the  maturation  of  the  offshoring  service  delivery  model,  coupled  with  the  diversi¬ 
fication  of  geographic  offshoring  locations,  has  resulted  in  significant  cost  savings  without 
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sacrificing  quality.  Nearly  half  of  the  survey  respondents  (42  percent)  are  currently  moving 
more  IT  services  offshore. 

“The  global  delivery  model  has  improved,  as  suppliers  providing  services  have  become 
trusted  partners  and  service  metrics  have  been  implemented  to  ensure  ongoing  quality  of 
service,”  says  McKenna.  “It  allows  tremendous  cost  savings  without  a  sacrifice  in  quality.” 

Working  With  Service  Providers 

The  desire  to  derive  more  value  from  their  IT  infrastructures  has  led  CIOs  to  evaluate  IT 
service  providers  on  a  more  granular  basis  as  well.  Companies  are  moving  away  from  ven¬ 
dors  that  offer  a  wide  spectrum  of  services  toward  those  that  concentrate  on  managing  a 
particular  IT  process. 

“We  don’t  prefer  one- 
size-fits-all  vendors, 
really,”  says  the  respon¬ 
dent  from  the  Midwestern 
medical  institution.  “We 
just  don’t  want  to  trust 
blindly  that  they  will  give 
us  the  right  people  for 
everything.” 

Service  solutions  such  as 
Integrated  Infrastructure 
Management™  (IIM)  are 
good  examples  of  the 
value  to  be  found  in  pro¬ 
cess  specialization.  By  or¬ 
ganizing  services  around 
process  bundles  such  as 
Wintel,  telecommunica¬ 
tions  or  the  data  center,  CIOs  can  use  outsourcing  to  reduce  costs  and  improve  productivity 
and  customer  satisfaction. 

“If  you  look  at  infrastructure  process  management  as  a  service,  you  can  drive  significant 
value  out  of  infrastructure  management— up  to  40  to  60  percent  productivity  improve¬ 
ment,”  says  McKenna.  For  example,  help-desk  outsourcing  as  part  of  a  Wintel  bundle  en¬ 
ables  workers  to  develop  deep  expertise  in  one  area,  allowing  them  to  resolve  issues  more 
quickly.  With  57  percent  of  respondents  outsourcing  help-desk  services,  or  considering 
doing  so  in  the  next  year,  this  appears  to  be  a  strategy  worth  evaluating. 

The  focus  on  vendors  with  expertise  in  specific  core  competencies  has  also  led  to  a  new  gen¬ 
eration  of  outsourcing  contracts,  as  CIOs  opt  for  smaller,  more  targeted  deals.  These  shorter- 
term  contracts  put  a  stronger  emphasis  on  relationship  management  and  outsourcers’  ability 
to  earn  and  keep  client  trust,  which  support  the  long-term  value  to  be  found  in  outsourcing. 

“CIOs  know  that  you  can’t  assume  that  a  large  deal  with  one  organization  is  going  to  pro¬ 
vide  best-in-class  services  across  competencies,”  says  McKenna.  “Finding  providers  with 
core  competencies  in  particular  process  bundles  allows  CIOs  to  receive  the  best  value  from 
each  service.” 


Factors  Driving  Consideration  of  On-Demand  and  Infrastructure- 
as-a-Service  Models 
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The  Value  of  Benchmarking:  ITIL  and  ISO  20000 

As  outsourcing  services  move  from  a  pure  cost  decision  to  one  that  relies  heavily  on  quality 
and  business  value,  CIOs  are  increasingly  turning  toward  formal  metrics  that  measure  the 
success  of  outsourcing  arrangements  and  track  progress  toward  goals.  For  example,  68 
percent  of  respondents  report  the  use  of  dashboards  and  measurement  of  IT  service  man¬ 
agement,  and  62  percent  measure  end-user  satisfaction. 

An  emerging  area  of  interest  lies  in  the  use  of  Information  Technology  Infrastructure 
Library  (ITIL®)— a  set  of  best  practices  and  frameworks  for  managing  IT  infrastructure,  ser¬ 
vice  delivery  and  support— with  55  percent  of  respondents  reporting  that  they  use  it.  “It's  a 
very  good  benchmark  for  CIOs  to  define  the  start  and  end  points  and  progress  points  of  a 
service  provider,”  says  McKenna. 

And  as  ISO  20000,  a  standard  for  IT  service  management,  gains  a  higher  profile  in  the 
CIO  community,  both  it  and  ITIL  should  drive  consistency  in  defining  performance  metrics. 
Eighty-seven  percent  of  survey  respondents  say  they  are  somewhat  or  very  familiar  with 
the  value  of  ITIL.  On  the  other  hand,  55  percent  are  somewhat  or  very  familiar  with  the 
value  of  ISO  20000  registration. 

Both  standards  are  worth  CIOs’  attention.  Outsourcing  companies  with  ISO  20000 
registration  can  demonstrate  effective  process  management.  Furthermore,  ISO  20000 
certification  and  the  use  of  ITIL  help  verify  the  effective  delivery  of  IT  services— and  thus 
are  significant  differentiators  in  the  quality  of  outsourcing  providers.  Considering  that  94 
percent  of  survey  respondents  cite  quality  of  services  as  a  critical  or  very  important  factor 
when  selecting  IT  outsourcing  partners,  ITIL  and  ISO  certifications  are  tangible  evidence  of 
a  provider’s  commitment  to  excellence. 

Conclusion 

It’s  clear  that  the  changing  landscape  of  IT  services  is  evolving  in  a  way  that  will  yield  sig¬ 
nificant  returns  for  CIOs  who  are  concerned  with  not  only  cost  but  also  value  and  quality. 

“The  need  for  competitive  pricing  will  never  change,  but  if  you’re  not  driving  business  value 
or  providing  quality  of  service,  there’s  no  point  in  having  the  conversation,”  says  McKenna. 
“CIOs  who  are  on  their  second  and  third  IT  services  contracts  put  more  emphasis  on  trust 
and  value,  not  just  cost.” 

Service  providers  that  are  able  to  build  long-term  relationships  will  enable  their  clients  to 
not  only  survive,  but  thrive.  The  bottom  line  is  that  the  emphasis  must  be  on  service.  “As 
CIOs  continue  to  emphasize  the  ability  to  deliver  consistent,  high-value  services,  those 
providers  who  focus  on  delivering  the  best  quality  possible  will  succeed  in  delivering  true 
business  payback  to  their  partners,”  says  McKenna. 


For  More  Information 

To  learn  more  about  Infrastructure  as  a  Service,  Remote  Infrastructure  Management 
services  and  CompuCom’s  Integrated  Infrastructure  Management™  solution,  please 
visit  www.CompuCom.com. 
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Insecurity 

Customer  data  breaches  just  keep  getting  worse 

The  statistics  around  the  costs  and  occur¬ 
rences  of  customer  data  breaches  are  astounding. 
So  why  is  the  sense  of  urgency  among  IT  execu¬ 
tives  lessening? 

Two  years  ago  I  wrote  about  the  increasing 
vulnerability  and  incredible  cost  of  not  securing 
customer  data  (see  “The  Coming  Pandemic”  at 
www.  cio.  com/article/20907),  and  yet  since  that 
time,  “data  privacy”  has  fallen  as  a  management 
priority  from  the  8th  to  the  11th  spot  in  CIO’s 
annual  “State  of  the  CIO”  research. 

A  study  conducted  by  The  Ponemon  Institute  found  that  the  average  cost  of  a 
data  breach  in  2007  was  $6.3  million,  representing  a  per-record  cost  of  $197.  How 
many  customer  records  do  you  handle  at  your  company? 

TJX  had  a  reported  94  million  credit  and  debit  records  stolen.  You  can  do  the 
math,  and  it’s  down  to  the  dollar.  TJX  has  put  aside  a  $197  million  pretax  reserve 
to  cover  breach-related  costs.  According  to  USA  Today,  the  company  has  already 
agreed  to  pay  MasterCard  $24  million  and  Visa  $41  million  out  of  this  reserve. 
Pretty  scary  stuff. 

This  is  the  nightmare  we  all  want  to  avoid  yet  the  incidents  continue  to  occur. 
This  March,  supermarket  chain  Hannaford  Brothers  had  up  to  4.2  million  card 
numbers  stolen,  leading  to  more  than  1,800  reported  accounts  of  fraud.  The  scary 
thing  is  that  they  were  PCI-compliant!  So,  just  remember  that  compliance  doesn’t 
equate  to  being  secure.  As  Bill  Homa,  CIO  of  Hannaford,  said  in  the  Boston  Globe, 
“The  bad  guys  are  one  step  ahead.” 

In  2007,  Ponemon  reported  that  laptops,  thumb  drives  and  mobile  devices 
accounted  for  49  percent  of  all  breaches.  I  bring  this  up  because  mobility  is  a  grow¬ 
ing  priority  of  yours,  which  means  that  sooner  or  later  the  data  protection  issue 
will  be  knocking  on  your  door.  Let’s  just  hope  that  when  it  does  come  knocking, 
it  is  the  CEO  saying,  “Job  well  done!”  and  not  “Why  is  60  Minutes  asking  for  an 
interview?” 


Michael  Friedenberg,  President  and  CEO 

mfriedenberg(a)cio.com 
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8  Aspect.  Microsoft 

One  small  step  for  Microsoft  and  Aspect. 

One  giant  leap  for  the  customer  experience. 

Aspect  is  pleased  to  announce  a  global  strategic  alliance  with  Microsoft  that  will  catalyze  the 
companies'  shared  vision  of  bringing  unified  communications  to  the  contact  center.  Because  contact 
centers  have  some  of  the  most  demanding  communications  requirements  in  the  business  world, 
Aspect  and  Microsoft  believe  that  it's  a  great  place  to  extract  value  from  your  UC  strategy. 

Our  unified  solutions  bring  customers  and  companies  together  by  bringing  presence,  instant 
messaging  and  voice  together  within  the  Aspect  Unified  IP  platform.  Now  that's  collaboration. 

Learn  more:  AspectPlusMicrosoft.com 
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Business  Outcomes  You 
Can  Count  On 

Predictability,  reliability  and  accountability 
require  cooperative  business  IT  strategy 

Andy  isherwood, 

VICE  PRESIDENT  AND  GENERAL  MANAGER,  HP  SERVICES 

ISHERWOOD,  WHO  HAS  BEEN  WITH  HP  FOR  MORE  THAN  20  YEARS,  IS  CHARGED 
WITH  LEADING  A  TRANSFORMATION  TO  LEVERAGE  THE  LINK  BETWEEN  THE 
COMPANY'S  SUPPORT  AND  SERVICES. 


What  challenges  do  CIOs  face  in  meet¬ 
ing  their  business  objectives  in  today's 
marketplace? 

The  ability  of  IT  to  meet  business  de¬ 
mands  is  the  greatest  challenge.  There 
has  been  explosive  growth  in  business 
applications  and  in  the  scope  and  scale 
of  the  infrastructure  needed  to  run  them. 
There  is  a  growing  gap  between  these 
applications  and  the  commensurate 
investment  in  IT  required  to  accommo¬ 
date  them.  The  gap  is  widening  because 
of  slow  communication  between  IT  and 
the  business,  and  an  inability  to  share 
processes  and  services  across  the  three 
major  IT  domains:  strategy,  applications 
and  operations. 


For  a  CIO,  how  important  is  optimiza¬ 
tion  of  business  outcomes  versus  a 
traditional  role  of  managing  technol¬ 
ogy  infrastructure? 

Their  job  depends  on  it!  The  CIO’s 
priorities  are  to  help  the  business  grow 
through  effective  and  efficient  IT,  lower 
costs,  improve  operational  excellence 
and  mitigate  operational  risk.  Therefore, 
optimization  and  predictability  of  posi¬ 
tive  business  outcomes  is  critical.  CIOs 
must  improve  information  for  better 
business  decisions,  lower  risks  by  con¬ 
trolling  the  infrastructure  and  reduce 
the  cost  of  technology  while  delivering 
more  to  the  business. 


What  is  the  role  of  predictability  in 
achieving  business  outcomes  in  a 
competitive  environment? 

Businesses  are  looking  for  CIOs  who  can 
offer  services  that  can  make  the  business 
more  predictable.  CIOs  need  to  think 
about  how  to  create  predictable  business 
outcomes  that  are  effective  in  terms  of 
total  cost  of  ownership  and  the  mitigation 
of  risk  for  the  business. 

How  can  services  be  used  to  unlock 
the  value  of  software  in  achieving 
business  outcomes? 

The  key  is  to  maximize  the  value  of  soft¬ 
ware  quickly  and  effectively.  Our  portfolio 
of  services  includes  three  principal  areas: 


Professional  Services,  Support  Organiza¬ 
tion  and  Software  as  a  Service  (SaaS).  Pro¬ 
fessional  Services  experts  mentor,  train 
and  enable  the  IT  staff  to  best  use  HP  soft¬ 
ware  solutions.  Our  Support  Organiza¬ 
tion  helps  implement  these  solutions.  We 
do  this  across  every  phase  of  the  software 
life  cycle  for  all  critical  IT  initiatives.  These 
experts  maximize  uptime,  optimize  busi¬ 
ness  outcomes  and  help  reduce  total  cost 
of  ownership.  Our  SaaS  group  can  host 
your  HP  software  on  a  predeployed  infra¬ 
structure  with  24/7  support  for  faster  time 
to  value,  less  risk  and  a  smooth  migration 
to  an  implementation  on  your  premises 
when  and  if  you  are  ready  to  go  there. 


How  have  your  services  helped  CIOs 
optimize  these  business  outcomes 
and  meet  objectives? 

We  recognize  four  key  stages  in  optimiz¬ 
ing  business  outcomes  over  the  life  cycle 
of  enterprise  software:  evaluate,  develop, 
deploy  and  operate.  The  evaluation 
stage  is  about  identifying  and  choosing 
solutions  most  likely  to  succeed,  thereby 
minimizing  cost.  The  development  and 
deployment  stages  ensure  the  “right-first- 
time”  development  and  deployment  of 
new  investments,  accelerating  time  to  val¬ 
ue.  The  operational  stage  is  about  main¬ 
taining  and  improving  continuity,  stability 
and  performance  to  lower  risks.  Our 
comprehensive  service  portfolio  helps 
accelerate  time-to-business  outcome  and 
reduce  downtime  and  cost.  Our  Software 
Services  salesforce  works  proactively  with 
customers  to  plan  the  deployment  of  a 
solution  across  its  entire  life  cycle,  not  just 
a  given  stage  in  the  life  cycle. 


FOR  MORE  INFORMATION: 

Check  out  the  white  paper 
"HP  Software  Services:  Optimizing 
Business  Outcomes"  at  www.cio. 
com/whitepapers/hp-softsvs 
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Custom  Solutions  Group 


Businesses  are  looking  for  CIOs  who  can  offer  ser¬ 
vices  that  can  make  the  business  more  predictable. 


Microsoft  Looks  Beyond 
Low-Cost  Laptops 


computing  Microsoft  is  look¬ 
ing  beyond  ultra-low-cost  laptops  to 
cheaper  alternatives  such  as  smart¬ 
phones  and  shared  computing  in  the 
drive  to  give  people  in  developing 
nations  a  way  to  communicate  and 
access  the  Internet. 

The  world’s  largest  software 
maker  has  a  few  projects  in  the  mak¬ 
ing,  including  a  push  to  use  mobile 
phones  in  computing  and  micro¬ 
finance.  Mobile  phones  have  had 
an  impact  in  the  developing  world, 
enabling  people  such  as  farmers  and 
fishermen  to  find  better  markets  and 
prices.  Handsets  give  a  person  a  way 
to  be  reached  for  jobs. 


“Technologies  like  the  mobile 
phone  promise  to  take  things  like  very 
small  loans,  microfinance,  and  allow 
them  to  operate  in  a  very  efficient 
infrastructure  so  that  the  price  and 
the  availability  of  financial  products 
can  be  far  broader,”  said  Microsoft 
chairman  Bill  Gates  at  the  Jakarta 
Convention  Center  last  month. 

One  reason  companies  are  looking 
more  to  mobile  phones  for  develop¬ 
ing  nations  is  because  of  the  huge 
number  of  handset  users  worldwide, 
estimated  at  3  billion,  and  because 
mobile  phone  network  coverage  is 
widespread.  Nearly  90  percent  of  the 
global  popula-  Continued  on  Page  14 
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Colleges  to  Speed  Adoption  of  Next-Gen  Wi-Fi 


wireless  Though  802. lln  is  in  its  infancy  and 
there’s  still  no  associated  official  wireless  standard, 

99  percent  of  all  North  American  universities  will  be 
using  it  by  2013,  according  to  a  report  by  ABI  Research. 

A  proposed  upgrade  to  today's  wireless  networking 
schemes  such  as  802.11b  and  802. llg,  the  new  standard 
promises  far  greater  speed  than  its  predecessors. 

Less  than  3  percent  of  North  American  universities 
are  using  802. lln  but  adoption  will  grow  rapidly  dur¬ 
ing  the  next  five  years,  ABI  predicts.  Wi-Fi  usage  in  K-12 
schools  is  also  expected  to  grow  during  that  period,  due 
to  a  need  for  enhanced  security  and  the  fact  that  schools 
are  instituting  "anytime,  anywhere”  learning. 

Europe  is  also  starting  to  join  in,  according  to  ABI. 
However,  Wi-Fi  adoption  there  could  be  hindered  by  lin¬ 
gering  health  concerns  associated  with  the  technology. 


Regardless,  global  revenue  from  Wi-Fi  access  point 
and  controller  equipment  in  the  higher-education  space 
will  jump  more  than  sixfold  from  $137  million  in  2007  to 
$837  million  in  2013,  ABI  says.  “Wi-Fi  access  point  and 
controller  equipment  revenue  in  the  global  higher  edu¬ 
cation  space  will  skyrocket,”  says  Stan  Schatt,  ABI  VP 
and  research  director. 

And  despite  a  common  belief  that  the  Wi-Fi  industry  in 
general  is  fueled  by  large  enterprise  wireless  deployments, 
a  separate  ABI  report  found  that  consumer  and  small- 
business  customers  make  up  the  vast  majority  of  the 
marketplace  for  the  technology.  In  fact,  95  percent  of 
all  access  point  shipments  last  year  were  to  consumer 
and  small  enterprises,  ABI  says.  Revenue  from  large 
enterprise  purchases  accounted  for  just  32  percent  of  all 
access  point  revenue  in  2007.  -A I  Sacco 
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outsourcing  Move  over,  India:  Africa  wants  a  piece  of  the 
IT  outsourcing  market.  Egypt,  Ghana,  Nigeria,  Senegal  and  South 
Africa  are  becoming  increasingly  aggressive  in  their  push  to 
compete  with  India— and  the  rest  of  the  world— in  outsourcing. 
“There  is  an  opportunity,”  says  Yankee  Group  analyst  Mindy 
Blodgett.  “India  is  going  to  remain  the  offshore  outsourcing 
leader  probably  forever,  but  you  never  know.  That  market  is  in 
trouble  because  of  attrition.  Companies  are  plagued  by  it.” 

Prices  are  also  going  up  in  India,  which  is  a  good  thing  for 
Africa.  Many  of  its  countries  also  have  a  time-zone  benefit  when 
dealing  with  European  customers. 

Several  African  nations  have  attracted  outsourcing  business 
but  to  compete  they  need  to  develop  a  larger,  better-educated 
workforce.  Problems  with  power  grids,  telecommunications 
infrastructure,  transport  infrastructure  and  unstable  govern¬ 
ments  also  must  be  addressed. 

International  capacity,  a  talent  pool  and  a  good  environment 
for  investments,  with  tax  incentives,  favorable  labor  laws,  and 
economic  and  political  stability,  sum  up  what  Orange  Business 
Services  looks  for  in  a  country.  “Once  you  get  that,  the  business 
will  come  and  the  customers  will  come.  The  demand  is  much 
higher  than  the  available  resources,”  says  Yasser  Radwan,  vice 
president,  Customer  Services  and  Operations,  Orange,  Egypt. 

There  is  reason  for  Egypt  and  other  countries  to  be  interested 
in  IT  and  business  process  outsourcing.  “These  are  good  jobs... 
they  tend  to  pay  well,  and  it  lifts  an  economy,"  says  Blodgett. 

-Mikael  Ricknas 


Execs  Put  a  Positive 
Spin  on  Globalization 
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Negative  1  Unlikely  to 

impact  [9%]  affect  my 

Don’t  company 
know 


business  Globalization 
is  viewed  by  top  executives 
at  leading  organizations 
around  the  world  as  a 
business  challenge  that 
is  here  to  stay,  according 
to  a  study  by  EquaTerra 
and  World  50  of  217 
business  leaders.  Most 
say  they  view  the  trend  as 
having  a  positive  long-term 
impact  on  their  business. 

SOURCE:  EquaTerra  and  World  50 
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tion  is  covered  by  a  mobile  phone  net¬ 
work,  according  to  the  GSM  Association 
and  CDMA  Development  Group. 

Microsoft  is  also  looking  at  ways  to 
hook  up  smartphones  to  TVs  to  use  the 
computing  power  and  connectivity  of 
the  handset  with  the  television’s  larger 
screen  for  a  better  and  cheaper  Internet 
experience  in  the  developing  world.  It 
began  working  on  Fone+  a  few  years  ago 
and  has  tested  prototypes,  proving  that 
such  devices  can  lower  the  cost  of  com¬ 
puting  for  the  poor. 

Ultra-low-cost  laptop  PCs  (ULCPCs) 
do  have  an  important  role  to  play  in 
providing  Web  access  to  developing 
countries,  but  such  devices  are  still 
expensive,  according  to  Craig  Mundie, 
Microsoft’s  chief  research  and  strategy 
officer,  and  the  head  of  its  Unlimited 
Potential  Group,  which  works  on 
projects  for  the  poor.  That’s  why  it  is 
working  on  Fone+  and  Multipoint,  a 
technology  in  which  each  student  has 
his  or  her  own  mouse  and  unique  cur¬ 
sor  to  use  the  same  computer.  That 
drops  the  price  of  computing  dramati¬ 
cally,  to  one  PC,  a  projector  and  30  com¬ 
puter  mice  per  classroom,  instead  of 
$200  per  laptop. 

Using  ULCPCs  to  bring  computing 
to  students  in  developing  countries 
began  with  the  $188  XO  notebook  from 
the  One  Laptop  Per  Child  Foundation 
(OLPC).  The  XO  originally  started 
with  an  open-source  OS,  but  OLPC  has 
worked  with  Microsoft  on  using  XP, 
and  Microsoft  has  dropped  the  price  of  a 
suite  of  Office  software  for  such  devices. 

Microsoft  and  other  organizations 
are  concerned  with  bringing  computing 
to  the  developing  world.  The  fear  is  that 
modern  countries  with  access  to  IT  and 
the  Internet  will  continue  to  expand  the 
gap  in  technological  know-how  over 
developing  nations. 

-Dan  Nystedt 
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TOSHIBA 

Leading  Innovation  »> 


I  We  spent  months 
trying  to  come  up 
with  the  perfect  name 

for  our  latest  technology. 

Then  we  realized 

his  mother  had  already 

done  that  for  us. 


HELLO 

my  name  is 


We  didn’t  set  out  to  have  a  technology  named  “Phil,”  but  that’s  exactly  what  we  got. 
You  see,  Phil  is  a  Toshiba  Professional  Services  Consultant.  And  at  Toshiba, 
before  we  send  in  our  technology,  we  send  in  professionals  like  Phil. 

Armed  with  our  Encompass™  analysis  program,  Toshiba  Professional 


Services  Consultants  can  find  hidden  cost  savings  within  your  organization,  making  your  copier 
fleet  more  productive  and  efficient.  That’s  human  innovation.  And  human  innovation 


is  leading  innovation.  Learn  more  at  copiers.toshiba.com. 


hiba  America  Business  Solutions,  Inc.  Electronic  Imaging  Division.  Ail  rights  reserved 
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study:  Software  Piracy  Still  Growing 


COMPUTERS  First, 
the  good  news:  The 
use  of  pirated  software 
dropped  in  67  of  108 
countries  surveyed  in  a 
study  by  the  Business 
Software  Alliance,  which 
represents  software  ven¬ 
dors  and  their  hardware 
partners  and  pursues 
companies  that  use 
pirated  software. 

Now,  for  the  bad  news: 
The  software  piracy  rate  increased  by  three  percentage 
points  to  38  percent  in  2007  because  the  worldwide  PC 
market  grew  fastest  in  high-piracy  countries,  according 
to  BSA.  Countries  such  as  Armenia  (93  percent  piracy 
rate),  Bangladesh  (92  percent)  and  Azerbaijan  (92  per¬ 
cent)  led  the  way  in  software  pirating. 

"We  are  making  much-needed  progress  in  the  battle 
against  PC  software  piracy,  and  that’s  good  news  for  gov¬ 
ernments,  end  users,  businesses  and  the  industry,”  says 


BSA  President  and  CEO  Robert  Holleyman.  “The  battle¬ 
ground  is  now  shifting,  however,  to  emerging  markets." 

Several  market  factors  contributed  to  a  rise  in  piracy 
rates.  First  were  the  market  dynamics  in  the  PC  segment, 
where  the  fastest  growth  is  in  the  consumer  and  small- 
business  arenas.  "These  are  the  hardest  sectors  in  which 
to  lower  piracy,”  the  report  notes.  Second  was  expanded 
Internet  and  broadband  access  in  emerging  markets. 

Market  research  company  I  DC  (a  sister  company 
to  CIO’s  publisher)  conducted  the  study  for  BSA,  rely¬ 
ing  on  proprietary  statistics  for  software  and  hardware 
shipments  gathered  through  surveys  of  vendors,  users 
and  the  software  sales  channels;  it  also  enlisted  IDC 
analysts  in  more  than  60  countries  to  review  local  mar¬ 
ket  conditions. 

In  total,  accordingto  IDC’s  estimate,  dollar  losses 
from  piracy  hit  nearly  $48  billion  in  2007,  a  20  per¬ 
cent  increase  from  2006.  That  loss  number  has  been 
controversial,  however.  Some  critics  say  BSA  wrongly 
assumes  that  every  illegal  software  copy  sold  would 
have  been  purchased  legally  otherwise. 

-Thomas  Wailgum 


Social  Responsibility  on  CIOs’  Agenda 


AWARDS  SociaJ 
responsibility  isn’t  just 
for  CEOs  anymore.  As 
the  CIO  role  continues 
to  change  and  expand 
into  the  business,  some 
technology  executives 
are  also  making  it  their 
mission  to  transform  how 
IT  is  viewed  by  and  can 
benefit  the  community. 

One  CIO  who  is  mak¬ 
ing  a  difference  is  Steve 
Scopellite,  winner  of  the 
CIO  of  the  Year  award 
from  Computers  for 
Youth  (CFY),  a  nonprofit 
organization  that  pro¬ 
vides  computers  for 
low-income  families. 
Scopellite,  managing 


director  and  co-CIO 
of  Goldman  Sachs',  is 
committed  to  creating 
an  environment  that 
can  sustain  a  diverse 
workforce  at  Goldman 
Sachs;  he  also  works  with 
schools  and  other  organi¬ 
zations  to  engage  young 
people  in  technology. 

“We  need  to  get  tech¬ 
nology  inthfe  hands  of 
kids  at  an  early  age.  And  I 
don’t  mean  Game  Boys,” 
says  Scopellite.  H is  work 
mentoring  and  recruiting 
future  IT  workers  is  why 
he  was  chosen  as  this 
year’s  CFY  winner. 

Recruiting  new  tal¬ 
ent  for  Goldman  Sachs 


became  Scopellite’s 
main  focus  after  he  real¬ 
ized  the  company  could 
do  a  better  job  of  getting 
women  and  minorities 
more  interested  in  tech¬ 
nology  careers.  “I  visited 
schools,  worked  with  our 
recruiters  and  vendors, 
and  together  with  our 
management  team,  we 
changed  the  process  with 
j  some  very  positive  out¬ 
comes,”  he  says. 

Scopellite  is  the  spon¬ 
sor  for  the  Technology 
Black  Network  within 
Goldman  Sachs,  a  net- 
j  work  that  is  part  of  its 
diversity  strategy.  Fie 
also  helped  establish 


the  Career  Develop¬ 
ment  Committee  and  the 
Diversity  Committee  for 
the  Technology  Division. 

“Recognizing  CIOs 
for  being  socially 
responsible  sends  an 
important  signal  about 
how  critical  the  role  of 
CIO  has  become,"  says 
Elisabeth  Stock,  CEO  and 
cofounder  of  CFY. 

Previous  CFY  award 
winners  include  Becky 
Blalock,  CIO  of  Southern 
Company,  and  Fran  Dra- 
rriis,  CIO  of  Bell  South. 

For  more  information 
about  CFY,  visit  www 
.cfy.org. 

-Jarina  D'Auria 
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»  What  you  want:  fast,  reliable,  secure  network  connectivity,  without  trade-offs. 
What  you  need:  Juniper  Networks.  Only  Juniper’s  portfolio  of  network  security 
and  infrastructure  solutions  powers  high-performance  businesses  —  securely 
connecting  users,  applications  and  resources  network-wide.  So  you  can  leverage 
the  network  for  greater  productivity,  and  meet  your  most  demanding  business  goals. 

Deliver  real-time  applications  and  services  to  everyone,  everywhere  —  any  time 
—  all  over  a  single  network.  And  ensure  unprecedented  levels  of  performance, 
availability,  flexibility  and  value  with  technologies  and  innovation  that  scale  and 
grow  with  your  business:  www.juniper.net/connected 


Juniper  _ 
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1.888.  JUNIPER 


»  Delivers  advanced  security  and  networking 
services  for  remote  sites  in  an 
easy-to-deploy,  cost-effective  form 
*  Allows  management  and  monitoring  through 
the  integrated,  Web-based  management 
application  —  Cisco®  Adaptive  Security 
Device  Manager 

>  Reduces  the  overall  deployment  and  operations 
costs  associated  with  providing  a  high  level 
of  security 


2749 

CDW  792590 


1  Secure  LAN,  intranet  and  extranet  access  for 
employees,  business  partners  and  customers 
'  Three  access  methods  allow  administrators 
to  provision  access  by  purpose 
1  Dynamic  access  privilege  management 
1  Endpoint  client,  device,  data  and  server 
security  controls 


inemamaa 


Call  CDW  for  pricing 

CDW  1449170 


1  Combines  Symantec  Antivirus  "  with  advanced 
threat  prevention  in  a  single  agent,  delivering  an 
unmatched  defense  against  malware  for  notebooks, 
desktops  and  servers 

1  Seamlessly  integrates  essential  security  technologies 
in  a  single  agent  that  is  administered  via  a  single 
management  console,  increasing  protection  and 
helping  lower  total  cost  of  ownership 

100-249  user  license  with  1-year  Essential  Support' 
$32.99  CDW  1314200 


We're  there  with  the  security  solutions  you  need. 

Security  threats  won't  get  on  your  network  if  they  can't  get  to  the  network.  That's  why  gateway  security 
is  so  important.  CDW  has  a  wide  selection  of  top-name  firewall  protection,  antivirus,  antispyware, 
intrusion  prevention  and  more.  Our  personal  account  managers  along  with  our  highly  trained  technology 
specialists  have  the  expertise  you  need  to  ensure  your  network  is  fortified  and  secure.  So  call  CDW  today. 
And  eliminate  threats  before  they  even  become  threats. 

CDW.com  800.399.4CDW 


Essential  Support  includes  24  x  7  technical  phone  support  and  upgrade  insurance;  call  your  CDW  account  manager  for  details.  Offer  subject  to  CDW's 
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ESSENTIAL 


FROM  INCEPTION  TO  IMPLEMENTATION  — I. T.  THAT  MATTERS 


The  greatest 
virtualization 
challenges  are 
yet  to  come. 
Here’s  why  one 
CIO  says  you 
should  focus  on 
process  manage¬ 
ment,  network 
provisioning  and 
IT  organization 
makeovers. 
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Time  to  Ride  Herd 
on  Virtualization 


BY  LAURI ANNE  MCLAUGHLIN 

VIRTUALIZATION  |  Evan  Jafa,  CIO  of  data  provider  First  American,  says  that  get¬ 
ting  your  virtual  servers  set  up  and  running  right  really  is  just  the  start  of  any  IT  leader’s 
virtualization  work.  And  that  if  you  don’t  think  holistically  about  virtualization,  you’re 
in  for  a  rude  surprise. 

“I  think  lots  of  folks  are  going  to  find  out  that  virtualization  poses  a  whole  new  set  of 
concerns  for  security,  networks  and  applications,”  says  Jafa. 

In  fact,  he  calls  management  a  “make  or  break  issue”  for  virtualization.  “Monitoring 
and  management  becomes  absolutely  critical  in  the  virtual  environment,”  says  Jafa,  who 
started  work  about  three  years  ago  on  a  large  project  to  consolidate  First  American’s  data 
centers  and  standardize  its  storage  and  networking  technologies. 

To  that  end,  his  organization  is  directing  much  of  its  energy  now  toward  management 
processes  and  tools,  wide  application  of  ITIL  process  to  the  virtualized  environment  and 
even  reshaping  the  IT  staff. 

Jafa  hopes  that  in  the  future,  virtualization  will  play  into  better  management  of  his  net¬ 
working  technologies  as  well.  He’s  already  testing  some  new  technologies  from  vendors, 
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including  Cisco,  to  advance  that  goal. 
If  you’re  trying  to  do  smart,  long-term 
virtualization  planning,  Jafa’s  advice 
may  prove  particularly  interesting. 

Keep  the  Data  Moving 

First  American’s  business,  which 
posted  $8.2  billion  in  2007  revenues, 
delivers  information  such  as  mort¬ 
gage,  real  estate  and  financial  data  to 
clients  in  those  industries  and  oth¬ 
ers.  So  while  many  IT  leaders  closely 
monitor  virtualization  projects  to 
ensure  that  application  service  levels 
don’t  slow  down  for  internal  users, 
Jafa’s  team  also  keenly  focuses  on 
application  performance  for  external 
customers. 

The  company  today  has  two  data 
center  locations,  one  in  California  and 
another  in  Texas,  with  about  4,500 
physical  servers,  soon  to  be  6,500 
(due  to  newly  added  business  units).  It 


percent  utilization  rates  on  standard 
servers,  he  says.  The  team  also  sees 
a  30  percent  to  35  percent  reduction 
in  energy  consumption  per  virtual 
machine,  compared  with  its  physical 
counterpart,  Jafa  notes. 

To  date,  IT  has  virtualized  25  per¬ 
cent  to  26  percent  of  First  American’s 
servers,  Jafa  says.  These  include 
many  production  servers,  plus  test 
and  development  and  staging  boxes. 
In  some  cases,  whole  business  units 
now  have  had  all  their  servers  virtu¬ 
alized,  he  says.  “My  goal  is  to  reach 
50  percent  virtualized  this  year,” 
he  adds. 

“Any  server  that  IT’s  using  is  going 
virtual,”  Jafa  says,  which  means  some 
300  servers  will  be  consolidated  onto 
seven  or  eight  physical  machines. 
“We  continue  to  work  on  virtualiz¬ 
ing  disaster  recovery.”  Jafa  is  bringing 
disaster  recovery  in-house:  “That’s 


“Virtualization  will  start  posinga 
serious  challenge  organizationally 
to  IT.  The  current  vertical  disciplines 
that  we  have  will  not  be  appropriate.” 

-Evan  Jafa,  CIO,  First  American 


serves  40,000  to  50,000  concurrent 
users  during  peak  business  hours; 
its  network  carries  10  to  21  terabytes 
of  data  per  hour,  averaging  about  15 
terabytes  per  hour,  Jafa  says. 

To  keep  all  that  data  flowing 
smoothly,  Jafa  says  his  tool  chest 
currently  includes  offerings  from 
VMware,  Microsoft,  BEA  (WebLogic) 
and  “lots  of  Linux.”  His  team  is  also 
using  HP’s  SiteScope  tools  for  hard¬ 
ware  performance  monitoring. 

Jafa  says  he  defines  virtualization 
as  “achieving  the  highest  efficiency  of 
any  given  system  at  any  given  time.”  In 
servers,  virtualization  is  netting  him 
50  percent  to  60  percent  utilization 
rates,  compared  with  10  percent  to  15 


going  to  be  completely  virtualized,” 
he  says,  noting  that  he  hopes  to  com¬ 
plete  the  disaster  recovery  project  by 
end  of  year. 

Virtualization  has  also  helped  Jafa’s 
team  as  the  company  consolidates  and 
centralizes  IT  services  for  an  array  of 
business  units.  “The  process  of  bring¬ 
ing  them  on  and  migrating  them  has 
become  faster,”  Jafa  says,  noting  that 
the  company’s  IT  provisioning  has 
improved  by  65  percent,  changing 
from  weeks  to  days. 

On  the  disaster  recovery  and  high 
availability  front,  virtualization  has 
given  Jafa  equally  dramatic  results. 
For  every  100  servers,  he  now  puts 
aside  four  servers  for  failover  pur- 


The  Virtualized 
Network  of 
the  Future 

Virtualization  of  the  LAN  is  a  con¬ 
cept  that  can  mean  different  things 
to  different  people.  The  basic  idea 
is  the  same  as  server  virtualization: 
Take  a  single  physical  resource,  like 
a  LAN,  and  virtualize  it  in  terms  of 
resource  sharing  and  simplified 
management. 

If  you  have  many  separate  LANs, 
you  can  use  virtualization  to  con¬ 
solidate  them  into  one  switch,  using 
technologies  such  as  Cisco’s  VLAN 
technology  and  Virtual  Switching 
System  (VSS),  notes  Deepak  Munjal, 
marketing  manager  of  Cisco  Data 
Center  Solutions.  You  can  also  con¬ 
solidate  network  services,  such  as 
firewalls  and  network  load  balancing. 

Looking  ahead,  vendors  such  as 
Cisco  would  like  IT  leaders  to  think 
about  virtualizing  the  actual  inter¬ 
faces  that  attach  to  a  server.  Today, 
various  cables,  including  fibre  chan¬ 
nel  interfaces  to  storage  and  Ether¬ 
net  interfaces  to  management  tools, 
come  out  of  physical  servers.  “You 
can  start  using  new  tools  to  collapse 
those  protocols”  onto  two  cables— a 
large  link  and  one  for  redundancy- 
says  Cisco’s  Munjal. 

This  is  the  idea  behind  fibre  chan¬ 
nel  over  Ethernet,  an  open-industry 
standard  that  makes  its  Cisco  debut 
in  the  Nexus  5000,  a  10GB  Ether¬ 
net  top-of-rack  switch  that  Cisco 
shipped  in  April. 

In  Cisco's  vision  of  the  future,  the 
benefits  in  a  network  design  using 
switches  like  this  one  resemble  the 
benefits  of  sever  virtualization:  less 
hardware  to  manage,  reduced  power 
and  better  utilization  of  hardware 
asset  and,  hopefully,  simplified 
administration. 

-L.M. 
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“Network  provisioning  becomes  as  critical  as  server 
provisioning.  We  are  very  interested  in  virtualization 


of  the  LAN  .  -EvanJafa 

poses  and  six  to  eight  servers  for  work¬ 
load  help  at  peak  usage  time  for  the 
company’s  customers.  Previously,  the 
company’s  high  availability  arrange¬ 
ment  meant  that  he  needed  to  put  aside 
200  servers  for  the  same  purpose. 

Politics  and  Process 
Lessons 

But  server  virtualization  is  the  start  of 
the  changes  at  First  American,  not  the 
end.  “As  we  started  to  think  about  vir¬ 
tualization,  we  started  to  think  about 
standardization,”  says  Jafa,  referring 
to  standardizing  processes  and  utiliz¬ 


ing  shared  resources,  across  not  only 
servers  but  also  storage  and  network¬ 
ing  technology. 

In  the  course  of  doing  his  planning, 
he’s  run  across  two  key  challenges 
that  IT  leaders  cited  in  CIO’s  recent 
survey,  “Your  Virtualized  State  in 
2008”:  workload  balancing  and  IT 

CORRECTION  Due  to  an  editing  error, 
the  May  15  Essential  Technology  story, 
"Run  Fast  With  Bl,”  misstated  which 
company  owns  Cognos.  Cognos  is 
owned  by  IBM.  We  regret  the  error. 


staff  management  issues.  (See  www 
.cio. com/article/168401  for  full  results 
of  that  survey.) 

“Capacity  planning  has  become 
critical  in  the  virtual  world,”  Jafa 
says.  “That’s  one  we’re  still  maturing 
and  figuring  out.  We’re  using  some  of 
the  HP  [SiteScope]  tools  for  capacity 
planning.” 

On  the  staffing  issue,  he  says  he 
hasn’t  had  to  deal  with  much  squab¬ 
bling  among  IT  members  who  are 
being  asked  to  work  together  in  new 
ways,  noting  that  his  team  is  mostly 
excited  about  virtualization.  The  big- 
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“In  the  virtual  world,  processes 
become  supercritical.  Provisioning 
needs  to  be  constantly  defined.” 

-  Evan  Jafa 


ger  political  challenge,  he  says,  involved 
First  American’s  diverse  collection  of 
business  groups.  “We  have  many  busi¬ 
ness  units,  and  to  get  them  off  the  notion 
of  ‘my  servers’  and  ‘my  storage’  took  a 
lot  of  work,”  Jafa  says.  “I  credit  our  [IT] 
change  management  organization.” 

Still,  he  says,  he  does  face  a  wave 
of  organizational  questions,  ones  that 
he  feels  most  IT  leaders  will  also  have 
to  battle. 

“Virtualization  will  start  posing  a 
serious  challenge  organizationally 
to  IT,”  he  says.  “The  current  verti¬ 
cal  disciplines  that  we  have  will  not 
be  appropriate.”  For  example,  he 
says,  IT  may  need  a  horizontal  group 
with  members  from  various  teams  to 
handle  provisioning. 

How  is  his  group  dealing  with  this 
situation?  “So  far  we  haven’t  torn 
down  the  vertical  organizations,”  Jafa 
says.  “Through  the  architecture  orga¬ 
nization,  we  have  brought  those  teams 
together.”  His  IT  team  now  has  an 
overall  architecture  team  that  works 
on  design,  architecture  and  process 
questions,  he  says. 

Bringing  the  traditionally  separate 
groups  together  is  the  right  approach 
because  virtualization  demands  net¬ 
work,  storage  and  security  expertise, 
not  just  server  know-how,  says  Burton 
Group  senior  analyst  Chris  Wolf. 

Process,  he  believes,  is  key.  Jafa,  who 
was  already  a  big  fan  of  using  ITIL  to 
standardize  IT  process  before  he  started 
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For  more  virtualization  news  and  advice, 
see  CIO. corn’s  new  VIRTUALIZATION 
DRILLDOWN  at  www.cio.com/topic/ 
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the  virtualization  efforts,  weaves  ITIL 
into  his  team’s  efforts  in  the  physical 
and  virtual  worlds.  Jafa  says  close  to 
55  percent  of  his  team  is  ITIL-certified 
and  he  has  a  full-time  ITIL  instructor 
in-house. 

“In  the  virtual  world,  processes 
become  supercritical,”  Jafa  says.  “We 
want  to  make  sure  to  test  our  processes 
to  see  how  they  will  do.  For  example, 
provisioning  has  to  be  constantly 
defined,”  he  says. 

“We  just  did  a  whole  assessment  of 
exactly  what  will  the  impact  of  virtu¬ 
alization  be  on  our  processes,”  he  says. 
“We  have  to  meld  some  of  our  pro¬ 
cesses  for  the  virtual  world,”  he  says, 
noting  that  network  design— and  even 
software  design— has  to  change  in  the 
virtualized  environment.  “Now  we  can 
look  at  the  long-term  impact.” 

On  that  networking  front,  Jafa  is 
now  working  with  Cisco  to  test  out 
technologies  such  as  Virtual  Switching 
Systems  (VSS)  and  VFrame  (a  family 
of  provisioning  and  automation  tools), 
in  a  quest  to  make  his  network  more 
standardized  and  simpler  to  manage 
(See  “The  Virtualized  Network  of  the 
Future,”  Page  20). 

“Network  provisioning  becomes  as 
critical  as  server  provisioning,”  Jafa 
says.  “We  are  very  interested  in  virtual¬ 
ization  of  the  LAN,  so  we  don’t  have  all 
these  protocols  for  storage  and  fibre  in 
the  network.  The  simpler  the  protocols 
and  the  more  collapsed  the  protocols 
are,  the  easier  the  virtualized  world  will 
be  managed.”  HE] 


Laurianne  McLaughlin  is  technology 
editor  for  CIO.  She  can  be  reached  at 
lmclaughlln@cxo.com .  To  comment  on  this 
article,  go  to  www.cio.com/article/341813 . 
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Howto  Sell  Security 

We  don’t  invest  in  information  security  because  we’re  predisposed  to  take 
the  risk  that  nothing  bad  will  happen.  So  if  you  want  to  sell  security  to  senior 
management,  turn  it  into  something  they’ll  actually  want  to  buy. 

here  are  two  basic  ways  to  sell  something.  Either  a  product 

gives  the  buyer  something  he  wants— satisfaction,  comfort  or 
money— or  it  prevents  the  buyer  from  getting  something  he 
doesn’t  want:  assault,  fraud,  burglaries  or  terrorist  attacks. 

It’s  a  truism  in  sales  that  it’s  easier  to  sell  someone  something  he  wants  than 
something  he  wants  to  avoid.  People  are  reluctant  to  buy  insurance,  or  home- 

security  devices,  or  computer-security  anything. 

It’s  not  that  they  don’t  ever  buy  these  things,  but 
it’s  an  uphill  struggle. 

The  reason  is  psychological.  And  it’s  the  same 
dynamic  when  it’s  a  security  vendor  trying  to  sell 
its  products  or  services,  a  CIO  trying  to  convince 
senior  management  to  invest  in  security,  or  a  secu¬ 
rity  officer  trying  to  implement  a  security  policy 
with  her  company’s  employees. 

It’s  also  true  that  the  better  you  understand  your 
buyer,  the  better  you  can  sell. 

Why  People  Are  Willing  to  Take  Risks 

First,  a  bit  about  Prospect  Theory,  the  underlying 
theory  behind  the  newly  popular  field  of  behavioral 
economics.  Prospect  Theory  was  developed  by  Dan¬ 
iel  Kahneman  and  Amos  Tversky  in  1979  (Kahne- 


man  went  on  to  win  a  Nobel  Prize  for  this  and  other 
similar  work)  to  explain  how  people  make  trade-offs 
that  involve  risk.  Before  this  work,  economists  had 
a  model  of  “economic  man,”  a  rational  being  who 
makes  trade-offs  based  on  some  logical  calculation. 
Kahneman  and  Tversky  showed  that  real  people 
are  far  more  subtle  and  ornery. 

Here’s  an  experiment  that  illustrates  Prospect 
Theory.  Take  a  roomful  of  subjects  and  divide  them 
into  two  groups.  Ask  one  group  to  choose  between 
these  two  alternatives:  a  sure  gain  of  $500  and  a 
50  percent  chance  of  gaining  $1,000.  Ask  the  other 
group  to  choose  between  these  two  alternatives:  a 
sure  loss  of  $500  and  a  50  percent  chance  of  losing 
$1,000. 

These  two  trade-offs  are  very  similar,  and  tradi¬ 
tional  economics  predicts  that  whether  you’re  con- 
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Your  car  comes  with  safety  and  security 
features;  they're  not  sold  separately. 
Same  with  your  house.  It  should  be  the 
same  with  computers  and  networks. 


templating  a  gain  or  a  loss  doesn’t  make  a 
difference:  People  make  trade-offs  based 
on  a  straightforward  calculation  of  the 
relative  outcome.  Some  people  prefer  sure 
things  and  others  prefer  to  take  chances. 

Whether  the  outcome  is  a  gain  or  a  loss 
doesn’t  affect  the  mathematics  and  therefore  shouldn’t  affect 
the  results.  This  is  traditional  economics,  and  it’s  called  Util¬ 
ity  Theory. 

But  Kahneman’s  and  Tversky’s  experiments  contradicted 
Utility  Theory.  When  faced  with  a  gain,  about  85  percent  of 
people  chose  the  sure  smaller  gain  over  the  risky  larger  gain. 
But  when  faced  with  a  loss,  about  70  percent  chose  the  risky 
larger  loss  over  the  sure  smaller  loss. 

This  experiment,  repeated  again  and  again  by  many 
researchers,  across  ages,  genders,  cultures  and  even  species, 
yielded  the  same  result.  Directly  contradicting  the  traditional 
idea  of  “economic  man,”  Prospect  Theory  recognizes  that 
people  have  subjective  values  for  gains  and  losses.  We  have 
evolved  a  cognitive  bias:  a  pair  of  heuristics.  One,  a  sure  gain 
is  better  than  a  chance  at  a  greater  gain,  or  “A  bird  in  the  hand 
is  worth  two  in  the  bush.”  And  two,  a  sure  loss  is  worse  than  a 
chance  at  a  greater  loss,  or  “Run  away  and  live  to  fight  another 
day.”  Of  course,  these  are  not  rigid  rules.  Only  a  fool  would 
take  a  sure  $100  over  a  50  percent  chance  at  $1,000,000. 
But  all  things  being  equal,  we  tend  to  be  risk- averse  when  it 
comes  to  gains  and  risk-seeking  when  it  comes  to  losses. 

This  cognitive  bias  is  so  powerful  that  it  can  lead  to  logi¬ 
cally  inconsistent  results.  Google  “Asian  disease  experiment” 
for  an  almost  surreal  example.  Describing  the  same  policy 
choice  in  different  ways— either  as  “200  lives  saved  out  of 
600”  or  “400  lives  lost  out  of  600”— yields  wildly  different 
risk  reactions. 

Evolutionarily,  the  bias  makes  sense.  It’s  a  better  sur¬ 
vival  strategy  to  accept  small  gains  rather  than  risk  them 
for  larger  ones,  and  to  risk  larger  losses  rather  than  accept 
smaller  losses.  Lions,  for  example,  chase  young  or  wounded 

wildebeests  because 
the  investment  needed 
to  kill  them  is  lower. 
Mature  and  healthy 
prey  would  probably 
be  more  nutritious,  but 
there’s  a  risk  of  missing 
lunch  entirely  if  it  gets 
away.  And  a  small  meal  will  tide  the  lion  over  until  another 
day.  Similarly,  it  is  better  to  risk  a  larger  loss  than  to  accept  a 
smaller  loss.  Because  animals  tend  to  live  on  the  razor’s  edge 
between  starvation  and  reproduction,  any  loss  of  food  can  be 
equally  bad.  Both  can  result  in  death,  so  the  best  option  is  to 
risk  everything  for  the  chance  at  no  loss  at  all. 


MakingtheCase 

How  does  Prospect  Theory  explain  the  difficulty  of  selling  the 
prevention  of  a  security  breach?  It’s  a  choice  between  a  small 
sure  loss— the  cost  of  the  security  product— and  a  large  risky 
loss:  for  example,  the  results  of  an  attack  on  one’s  network. 
Of  course,  there’s  a  lot  more  to  the  sale.  The  buyer  has  to  be 
convinced  that  the  product  works,  and  he  has  to  understand 
the  threats  against  him  and  the  risk  that  something  bad  will 
happen.  But  all  things  being  equal,  buyers  would  rather  take 
the  chance  that  the  attack  won’t  happen  than  suffer  the  sure 
loss  that  comes  from  purchasing  the  security  product. 

Security  sellers  know  this,  even  if  they  don’t  understand 
why,  and  always  try  to  frame  their  products  in  positive 
results.  That’s  why  you  see  slogans  with  the  basic  message 
“We  take  care  of  security  so  you  can  focus  on  your  business” 
or  carefully  crafted  ROI  models  that  demonstrate  how  prof¬ 
itable  a  security  purchase  can  be.  But  these  never  seem  to 
work.  Security  is  fundamentally  a  negative  sell. 

One  solution  is  to  stoke  fear.  Fear  is  a  primal  emotion,  far 
older  than  our  ability  to  calculate  trade-offs.  When  people  are 
truly  scared,  they’re  willing  to  do  almost  anything  to  make 
that  feeling  go  away;  lots  of  psychological  research  supports 
that.  Any  burglar  alarm  salesman  will  tell  you  that  people 
buy  only  after  there  has  been  a  robbery  in  the  neighbor¬ 
hood.  The  fears  stoked  by  9/11  have  fueled  an  entire  indus¬ 
try  devoted  to  counterterrorism.  When  emotion  takes  over, 
people  are  less  likely  to  think  rationally. 

Though  effective,  fearmongering  is  not  very  ethical.  The 
better  solution  is  not  to  sell  security  directly  but  to  include  it 
as  part  of  a  more  general  product  or  service.  Your  car  comes 
with  safety  and  security  features  built  in;  they’re  not  sold 
separately.  Same  with  your  house.  And  it  should  be  the  same 
with  computers  and  networks.  Vendors  need  to  build  secu¬ 
rity  into  the  products  and  services  that  customers  actually 
want.  CIOs  should  include  security  as  an  integral  part  of 
everything  they  budget  for.  Security  shouldn’t  be  a  separate 
policy  for  employees  to  follow  but  part  of  overall  IT  policy. 

Security  is  inherently  about  avoiding  a  negative,  so  you 
can  never  ignore  the  cognitive  bias  embedded  so  deeply  in  the 
human  brain.  But  if  you  understand  it,  you 
have  a  better  chance  of  overcoming  it.  pnn 


Bruce  Schneier  is  chief  security  technology  offi¬ 
cer  with  BT.  To  comment  on  this  article,  go  to 
www.cio.com/article/367913. 


Security  Matters 


Fora  reminder  of  why  SECURITY  is  so 
critical,  read  Human  Error  Tops  the 
List  of  Security  Threats  at  www.cio 
. com/article/179802 

cio.com 
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Every  day,  oi  I  companies  harness  gushers  of  data  to  set  rates 
for  a  gallon  of  gas.  Learn  how  they  match  the  right  tools 
with  information  to  maximize  profits. 


the  price 


BY  KIM  S.  NASH 


Reader  ROI 

”  How  oil  companies 
use  business  intel¬ 
ligence  data  to  deter¬ 
mine  their  prices 

::  The  limits  of  Bl  tools 

”  Ideas  for  integrating 
siloed  data 


Gas  tops  $4  per  gallon  .  Crude  is  trading  at  all-time  highs— above 

$125  a  barrel.  And  oil  and  gas  companies  are  booking  fat  profits.  In  May,  Exxon  Mobil 
reported  $10.9  billion  in  profits  for  its  latest  quarter,  just  short  of  its  record-breaking  $11.7 
billion  the  quarter  before. 


It’s  tempting— and  politically  expedient— to  explain  such  astounding  numbers  by  say¬ 
ing  that  greedy  oil  companies  are  taking  advantage  of  market  fears,  making  money  on  the 
bent  backs  of  corporate  and  individual  consumers.  So  many  of  us,  after  all,  have  no  choice 
but  to  buy  fuel.  We  fill  our  cars  to  drive  to  work,  where  buildings  must  be  heated  in  winter, 
supplies  must  be  shipped,  products  trucked  and  executives  jetted  hither  and  yon. 

Yet  economists  will  counter  that  taking  advantage — spotting  a  revenue  opportunity  and 
moving  on  it— is  exactly  what  companies  should  do:  That’s  capitalism.  Oil  companies  excel 
at  identifying  where  their  profit  advantage  lies.  And  they  obtain  that  advantage  through 
sophisticated  business  intelligence  systems. 

Without  good  BI,  oil  companies  risk  their  livelihoods,  says  David  Knapp,  a  senior  editor 
at  the  Energy  Intelligence  Group,  an  information  provider  for  the  oil  industry.  “Those  that 
have  lagged  in  understanding  have  lagged  in  performance,”  Knapp  says. 
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-i/.  to  stir  or  stimulate  to  action; 
to  free  colleagues  from  the  status  quo. 

Now  more  than  ever,  CIOs  are  driving  change  -  change  that 
encompasses  innovation,  global  integration,  evolving  business 
models  and  corporate  social  responsibility.  CEOs  are  turning  to 
them  to  be  the  catalysts  for  safe  and  smooth  change  management. 
The  2008  Global  CEO  Study:  Implications  for  the  CIO  draws 
on  five  key  insights  from  1,130  thought  leaders*  about  new  ways 
to  bring  business  and  IT  together.  Insights  that  let  you  put 
opportunities  into  action. 

DOWNLOAD  THE  WHITEPAPER  AT  IBM.COM/D0ING/CI01 
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Hess  needs  multiple  business 
intelligence  tools  to  analyze  data 
from  different  parts  of  the 
company’s  value  chain,  says 
Gary  Lensing,  VP  and  CIO  for 
global  exploration  and  production 


And  BI  is  all  about  understanding 
what  makes  your  company— and  your 
industry— thrive.  Mortgage  lenders, 
for  example,  are  going  under  in  part 
because  they  didn’t  analyze  enough  of 
the  right  customer  data  and  signed  up 
risky  borrowers.  Retailers  in  trouble  are 
studying  financial  intelligence  to  deter¬ 
mine  whether  they  should  seek  loans  to 
stay  afloat,  like  Borders  Group,  or,  like 
RedEnvelope  and  Lillian  Vernon,  file 
Chapter  11. 

Oil  companies  have  always  lived  and 
died  on  BI,  says  Gary  Lensing,  VP  and  CIO 
for  global  exploration  and  production  at  the 
$32  billion  Hess.  “Data  drives  what  we  do, 
always  quantifying  where  that  value  is.” 

Hess  and  its  competitors  harvest  data 
from  inside  and  outside  their  four  walls, 


plus  they  factor  in  wild  cards  such  as  war, 
weather  and  global  politics.  BI  in  oil  and 
gas  isn’t  a  simple  matter  of  buying  a  set  of 
analysis  tools  and  feeding  data  into  them. 
Oil  companies  pass  information  through 
multiple  layers  of  software,  with  nearly 
every  employee  focused  on  collecting 
and  storing  some  kind  of  data.  Exxon,  for 
example,  wants  its  geophysicists  to  know 
Fortran,  C  and  Java  so  they  can  code  their 
own,  quick  analyses.  When  Hess  drills  a 
well,  Lensing  says,  engineers  collect  status 
data  every  15  seconds. 

Typically,  specialized  applications  for 
oil  and  gas— such  as  Geolog  from  Para¬ 
digm  Geotechnology  (to  find  patterns  in 
seismic  measures)  or  PDI  FocalPoint  from 
Professional  DataSolutions  (to  track  gas 
station  store  sales  in  a  dashboard)— have 


their  own  analysis  capabilities.  But  to  get 
a  global  view  of  company  performance, 
that  data  must  be  fed  into  off-the-shelf  BI 
analysis  and  reporting  packages  familiar 
to  most  CIOs,  such  as  those  from  Cognos 
or  SAS  Institute.  Then  the  companies  add 
supply-chain  information.  SAP  for  Oil  & 
Gas  modules  manages  the  supply  chains 
at  companies  like  Hess  and  Valero.  Those 
companies  also  use  at  least  some  of  SAP’s 
analysis  and  storage  applications,  includ¬ 
ing  Business  Warehouse.  Oil  companies 
store  data  in  both  common  databases, 
such  as  Oracle,  and  specialized  ones  for 
the  oil  industry,  such  as  OpenWorks  or 
Strat Works  from  Halliburton. 

When  it  comes  to  BI,  Big  Oil  has  a  big 
view.  “We’re  not  as  transactionally  driven 
as  other  industries,”  Lensing  says.  “Are 
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Today's  IT  Leaders  on  Market  Trends 


UNIFIED 

COMMUNICATIONS 

What’s  your  strategy? 


Unified  communications  is  the  answer  to  the  chal¬ 
lenge  of  managing  communication  technologies, 
which  has  grown  exponentially  over  the  last  few 
years.  Global  organizations  have  to  con¬ 
tend  with  standard  business  telephones, 
mobile  phones,  PDAs,  desktop  systems, 
laptops,  e-mail,  and  video  communica¬ 
tions.  Integrating  those  many  disparate 
forms  of  voice  and  data  communications 
is  essential.  Unified  communications  * 

brings  together  all  these  individual  tech¬ 
nologies  and  facilitates  access  to  all  those 
varied  lines  of  communication  with  a 
unified  user  experience  over  any  device. 

Global  CIOs  are  closely  watching 
the  emerging  unified  communications  market  and  making 
their  implementation  plans.  According  to  a  recent  survey 
conducted  by  IDG  Research  Services  of  200  IT  leaders 
across  the  United  States,  Europe  and  India,  nearly  three- 
quarters  of  the  respondents  indicate  they  have  a  unified 
communications  solution  already  in  place,  or  are  evaluat¬ 
ing  the  technology  for  a  planned  implementation  some¬ 
time  within  the  next  12  months.  Key  highlights  of  the 
IDG  unified  communications  research  include: 

•  90  percent  are  extremely  to  somewhat  confident 
that  unified  communications  can  deliver  on  the 
promise  of  increased  productivity 
•  79  percent  believe  unified  communications  can 
drive  real  business  benefits  for  their  companies 
•  74  percent  of  the  respondents  who  have  deployed 
IP  telephony  did  so  with  the  goal  of  moving  toward 
unified  communications 

“Communication  is  a  really  important  aspect  of  our 
business,”  says  one  global  IT  leader  who  responded  to  the 
IDG  Research  unified  communications  survey.  “To  get 


business,  you  need  to  better  communication  with  your 
clients.  Once  you  communicate  with  your  clients  and 
prospective  clients,  your  business  opportunities  increase. 

Once  your  business  opportunities  in¬ 
crease,  the  volume  increases.” 

The  communication  and  man¬ 
agement  requirements  of  today’s  glob¬ 
al  enterprise  are  the  true  drivers  of  the 
unified  communications  market.  In 
the  current  dynamic  and  demanding 
business  climate,  the  modern  enter¬ 
prise  needs  constant  connectivity  and 
simplified  access.  The  key  benefits 
CIOs  hope  to  gain  from  implement¬ 
ing  unified  communications  are  re¬ 
duced  operational  costs  and  improved  security  for  their 
global  communications  networks. 

Most  IT  Leaders  Have  a  Strategy  for  Unified  Communications 

IP  telephony  is  one  of  the  technologies  driving  the  unified 
communications  market.  On  a  worldwide  basis,  nearly 
three-quarters  of  executives  at  global  enterprises  say  they 
are  deploying  IP  telephony  as  a  part  of 
a  larger  goal  of  rolling  out  unified  com¬ 
munications.  U.K.-based  respondents 
(85  percent)  and  India-based  respon¬ 
dents  (80  percent)  are  moving  forward 
at  a  slightly  higher  rate  than  U.S.  execu¬ 
tives  (66  percent).  Digging  a  bit  deeper, 
of  those  same  respondents,  by  far  the 
majority  (85  percent  worldwide)  plans 
to  deploy  IP  telephony  directly  in  con¬ 
junction  with  unified  communications 
solutions,  showing  the  intuitive  connec¬ 
tion  between  the  two  technologies. 


About  CI02CI0 
Perspectives:  This 
peer-based  thought 
leadership  program 
analyzes  quantitative 
research  and  tests 
it  via  qualitative 
interviews  with  actual 
CIOs.  The  resulting 
executive  insight  is 
then  disseminated 
via  CXO’s  multimedia 
assets.  To  learn  more 
about  CI02CI0 
Perspectives, 
please  contact 
mavery@cxo.com. 
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“Communication  is  at  a  premium,  especially  because 
we  are  diversified  at  so  many  different  locations.  Our  busi¬ 
ness  spans  all  the  continents  and  we  need  24/7  connectiv¬ 
ity,”  says  an  IT  leader  for  an  India-based  consulting  firm. 
“IP  telephony  is  helping  us  a  lot  in  this  area.”  He  describes 
using  IP  telephony,  integrated  with  a  Microsoft  network¬ 
ing  facility,  for  a  meeting  with  a  client  based  in  Atlanta. 
“We  integrate  IP  telephony  with  different  technologies  to 
help  our  business  grow.” 

IP  telephony  is  followed  most 
closely  as  a  market  driving  factor  by 
several  other  communication  appli¬ 
cations,  including:  web  conferenc¬ 
ing  (63  percent);  instant  messaging 
(58  percent);  video  conferencing  (58 
percent);  unified  messaging  (57  per¬ 
cent);  and  desktop  and  application 
sharing  (55  percent). 

Despite  concerns,  there  is  evidence  of  confidence 
among  global  IT  leaders  that  unified  communications  can 
deliver  on  the  technological  and  business  case  promises  of 
increased  productivity  and  reliability.  There  is  also  a  high 
degree  of  consensus  among  the  survey  respondents  that  uni¬ 
fied  communications  solutions  are  indeed  valuable  business 
applications  (85  percent)  and  that  unified  communications 
solutions  can  drive  real  business  benefits  (79  percent) .- 

Having  a  Unified  Communications  Partner  is  Essential 

The  move  to  unified  communications  is  well  under  way, 
guided  by  the  promise  of  tangible  business  benefits.  In  fact, 
IDG  survey  respondents  have  great  expectations  for  these 
solutions  and  rank  the  following  benefits  as  critical  or  very 
important:  reduced  operational  costs  (82  percent);  im¬ 
proved  network  security  for  remote  employees  (81  percent); 
optimized  business  processes  (78  percent);  and  infrastruc¬ 
ture  flexibility  to  adapt  to  changes  (76  percent). 

In  planning  a  move  to  unified  communications, 
choosing  the  right  partner  is  essential.  Nortel  offers  inno¬ 
vative  products  and  a  skilled  network  of  industry  partners 
like  Microsoft  and  IBM  to  help  achieve  a  smooth  transi¬ 
tion  to  a  secure,  optimized  unified  communications  envi¬ 
ronment.  Nortel’s  Global  Services  team  eases  implementa¬ 


tion  with  services  that  include: 

•  Architecture,  strategy  and  consulting.  Establish  and 
execute  on  a  strategic  plan  to  deploy  unified  communica¬ 
tions  solutions  use  of  best-of-breed  technology  that  help 
customers  achieve  strategic  and  operational  results. 

•  Assess,  integrate  and  deploy.  Seamlessly  integrate 
and  upgrade  unified  communications  technologies  within 
your  current  infrastructure,  with  no  disruption  of  on-go¬ 
ing  business  operations. 

•  Manage,  support  and  evolve. 
Nortel’s  Global  Services  team  can 
help  increase  operational  efficiency 
and  improve  performance  of  unified 
communicarions  solutions. 

Nortel  has  the  technology  to 
meet  all  of  an  organization’s  unified 
communications  needs,  from  Voice- 
over-IP  solutions  and  multimedia  applications  to  data 
solutions  and  telepresence.  Nortel’s  portfolio  includes 
application-aware  networks,  business-grade  telephony, 
IP  phones  and  clients,  messaging  applications  and  secu¬ 
rity  gateways. 

These  days,  knowledge  workers  need  the  conve¬ 
nience  and  accessibility  of  unified  communications. 
Global  enterprises  need  the  boost  in  productivity,  cost 
and  time  savings  and  secure  access  they  can  realize 
through  unified  communications., 

IT  leaders  across  the  globe  agree  on  the  promise  of 
unified  communications  and  the  need  for  a  well  thought- 
out,  measured  response.  Careful  evaluation  and  planning 
are  essential.  The  key  to  success  when  making  the  choice  to 
implement  is  choosing  a  partner  who  can  provide  reliable, 
secure  equipment  that  integrates  well  with  existing  com¬ 
munications  infrastructure,  and  can  provide  on-going  sup¬ 
port  throughout  the  implementation  process  and  beyond. 

Go  to  www.cio.com/whitepapers/nortel-uc 

to  obtain  a  free  download  of  the  white  paper  from  this  article. 
Based  on  a  major  research  survey  by  IDG  Research  Services, 
this  paper  features  in-depth  discussions  with  CIOs  and  draws 
on  peer  insights  to  help  CIOs  formulate  their  unified  commu¬ 
nications  strategy. 


SEVENTY-NINE  PERCENT 
OF  SURVEY  RESPON¬ 
DENTS  SAY  THAT  UNI¬ 
FIED  COMMUNICATIONS 
SOLUTIONS  CAN  DRIVE 
REAL  BUSINESS  BENEFITS. 
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Working  harder  and  longer  than 
ever  before,  you  need  a  way  to 
preserve  your  productivity  at 
work  and  your  sanity  at  home. 

Here's  how.  Page  33 
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Data  Analysis  Can  Help 
Cut  Fuel  Costs,  Too 

UPS  crunches  information  from  its  trucks  to  improve  effi¬ 
ciency  and  save  money 

At  UPS,  there’s  data  everywhere:  on  the  packages,  on  the  drivers  carrying  hand¬ 
helds  to  record  customer  interactions,  even  inside  those  ubiquitous  brown  trucks. 
UPS  vehicles  contain  a  wealth  of  data  drawn  from  more  than  200  sources  inside 
the  trucks.  And  last  year,  the  company  found  a  way  to  cut  its  fuel  costs,  among 
other  efficiencies,  by  putting  this  data  together  using  telematics  technology. 

Telematics  refers  to  systems  used  for  transmitting  data  to  and  from  vehicles. 
UPS’s  system  uses  off-the-shelf  telematics  software  to  help  gather  and  compile 
the  data  from  the  trucks.  Then,  proprietary  applications  using  in-house-developed 
algorithms  allow  UPS  automotive  and  operations  personnel  to  query  and  analyze 
the  information. 

In  2007,  UPS  piloted  its  telematics  program  on  334  delivery  trucks  in  Georgia. 
Analysis  of  the  data  generated  helped  to  cut  the  amount  of  time  delivery  trucks 
idled  by  24  minutes  per  driver  per  day— for  an  estimated  fuel  savings  of  $188  per 
driver,  per  year.  “That  adds  up  to  a  lot  of  wasted  fuel,”  says  Jack  Levis,  a  manager 
in  UPS’s  industrial  engineering  group,  "and  a  lot  of  carbons  being  emitted  into  air 
that  don’t  need  to  be.”  UPS  has  more  than  90,000  U.S.  package  drivers,  so  the 
potential  savings  could  amount  to  millions. 

In  addition,  many  of  the  insights  gained  from  the  telematics  system  have  been  eye¬ 
opening  and  somewhat  counterintuitive  for  the  engineers  in  the  automotive  group.  For 
example,  UPS  has  typically  scheduled  fleet  maintenance  according  to  time-depen¬ 
dent  factors.  But  engineers  and  other  "data  miners,"  as  Levis  calls  them,  discovered 
that  UPS  was  replacing  large  components  and  parts  on  its  delivery  trucks  when  tele¬ 
matics  showed  that  what  actually  needed  to  be  replaced  was  just,  say,  an  O-ring.  “So 
rather  than  a  thousand-dol  lar  job,  it  was  a  $20  or  $30  job,”  Levis  says. 

There’s  more  to  learn  as  operations  analysts  comb  through  the  data  looking  for 
other  efficiency  patterns  and  safety  trends.  For  instance,  UPS  delivery  personnel 
may  be  driving  unnecessary  miles  on  their  routes.  “We've  just  scratched  the  sur¬ 
face  on  finding  things,"  says  Levis.  (To  read  an  expanded  version  of  this  story,  go  to 
www.cio.com/article/355913 .)  - Thomas  Wailgum 


you  trying  to  gain  operational  efficiencies 
by  squeezing  pennies  out  of  transactions, 
or  are  you  looking  at  core  assets  and  try¬ 
ing  to  extract  additional  value?” 

Examine  how  oil  companies  approach 
BI  and  you  will  uncover  valuable  les¬ 
sons  for  improving  your  own  BI  efforts, 
whether  you’re  trying  to  optimize  profits 
or  uncover  untapped  markets. 

Factors  in  the  Price  of  Gas 

Old-timers  called  oil  “Texas  Tea,”  but 
the  U.S.  oil  industry  really  started  in 
Pennsylvania,  with  the  1859  discovery 
of  light  crude  burbling  between  rocks  in 
a  farmer’s  creek.  People  at  first  used  it  to 
grease  machinery  and  light  lamps.  Fifty 
years  later,  rigs  pumped  black  gold  from 
wells  across  the  country  and  fortunes  were 
made.  Now,  as  then,  oilmen  cagey  about 
their  claims  don’t  say  much  about  what 
they  know.  But  some  will  talk  about  how 
they  know  it. 

In  an  industry  where  the  top  five  oil 
companies  last  year  booked  $1.5  trillion 
in  sales,  thieves  target  that  intelligence. 
In  February,  for  example,  Petrobras,  the 
$112  billion  state-owned  oil  giant  in  Brazil, 
had  four  laptops  and  two  hard  drives  sto¬ 
len.  They  contained  “secret  and  important 
information,”  the  company  told  Brazilian 
news  outlets,  about  an  ocean  reservoir 
that  in  the  next  few  years  could  produce 
up  to  8  billion  barrels  of  oil.  Brazilian 
police  are  said  to  be  investigating. 

Geologic  information  like  the  sort 
believed  to  have  been  stolen  from  Petro¬ 
bras  is  one  piece  of  the  “upstream”  part  of 
the  business,  where  companies  and  coun¬ 
tries  explore  and  drill  for  oil  deposits  deep 
in  the  earth.  Analysts  combine  geologic 
and  seismic  data  with  what-if  engineer¬ 
ing  models  showing  how  best  to  get  the 
oil  out  and  the  projected  costs  of  such  a 
multiyear  project,  explains  Louie  Ehrlich, 
CIO  and  president  of  Chevron  Informa¬ 
tion  Technology. 

Then  there  is  the  “downstream”  work  of 
refining  crude  oil  into  something  usable, 
such  as  gasoline  or  diesel,  and  of  getting 
those  products  sold  and  delivered.  Those 
jobs  generate  information  on  refinery 
capacity  and  throughput,  for  example,  and 


the  cost  of  marketing  and  distribution. 

Exxon  and  Chevron,,  the  biggest  oil  com¬ 
panies  in  the  United  States,  are  known  as 
“integrated,”  meaning  they  work  both  the 
upstream  and  downstream  ends  of  the  busi¬ 
ness.  Petrobras  does,  too,  though  Ehrlich 
points  out  that  no  company  is  perfectly 
integrated,  meaning  that  what  it  finds  in  the 
ground  always  ends  up  in  its  own  refineries. 
Chevron  might  find  crude  that  its  refiner¬ 
ies  don’t  handle,  he  says.  “Some  types  of  oil 
require  more  complex  refining  capability  to 
process.”  Chevron  produces  about  2  million 
barrels  of  oil  per  day  and  only  refines  about 


15  percent  in  its  own  refineries. 

Others  focus  on  just  one  end  or  the 
other.  Valero,  for  example,  is  the  biggest 
U.S.  refiner,  concentrating  on  the  down¬ 
stream  work  of  turning  oil  into  other 
things  to  sell. 

Upstream  usually  costs  more  than 
downstream.  Exxon,  for  example,  spent 
$15.7  billion  on  upstream  jobs  in  2007. 
Chevron,  $15.5  billion.  But  downstream 
costs  stack  up,  too.  Exxon’s  were  $1.1  bil¬ 
lion  and  Chevron’s  $3.4  billion. 

Prices  at  the  pump  reflect  these 
expenses.  The  cost  of  crude  oil  constitutes 
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„  It’s  innovation  that  keeps  great  companies  on  the 
1*  cutting  edge— and  two  steps  ahead  of  the  compe¬ 
tition.  But  while  CIOs  may  have  their  eyes  firmly 
on  innovation,  they  also  must  deal  with  mandates 
to  cut  costs  and  focus  on  immediate  returns. 

Still,  the  course  to  innovation  is  necessary  and  reward¬ 
ing.  “In  its  simplest  form,  innovation  is  any  change 
that  adds  value  to  the  way  we  interact  with  the  world 
around  us,”  says  Thomas  Koulopoulos,  founder  of 
the  Delphi  Group,  a  strategic  thought  leadership  and 
advisory  firm,  and  executive  director  for  the  Center 
for  Business  Innovation  at  Babson  College.  Innova¬ 
tion  should  always  contribute  to  the  business,  he  says, 
though  it  occurs  over  a  broad  spectrum— from  radical 
innovations  that  change  business  in  monumental  ways 
to  incremental  innovations  that  spin  existing  concepts 
in  new  ways. 
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Technology  Turns  the  Tides  of  Innovation 

So  what  do  CIOs  really  think  about  innovation? 

In  a  recent  survey  sponsored  by  AT&T,  IDG  Research 
Services  has  found  that  innovation  is  considered 
critical  to  good  business  practices,  with  44  percent  of 
survey  respondents  rating  its  importance  as  very  high 
within  their  organizations.  Yet,  a  disconcerting  truth 
is  revealed  when  only  14  percent  say  their  organiza¬ 
tions  are  “very”  or  “extremely”  effective  in  stimulating 
innovation. 

Unsurprisingly,  most  respondents  agree  that  IT  plays 
a  “very  important”  or  “critical”  role  in  narrowing  that 
deficit.  In  fact,  42  percent  say  that  technology  is  core 
to  innovative  spirit,  delivering  important  business 
benefits: 


•  Improve  Productivity:  Technology  empowers  users 
to  do  what  they  need  to  do  efficiently  and  effec¬ 
tively.  Specifically,  remote  access  is  rated  highly  for 
improving  productivity,  followed  closely  by  wireless 
networking.  Unified  communications,  RFID  and  utility 
computing  are  also  cited. 


Custom  Solutions  Group 


•  Promote  Collaboration:  In  today’s  mobile  and  dis¬ 
tributed  workforces,  collaboration  technology  bridges 
the  time  and  distance  barriers  that  can  stunt  innova¬ 
tion.  Respondents  point  to  unified  communications, 
wireless  networking  and  remote  access  as  the  top 
technologies  for  promoting  collaboration. 

•  Stimulate  Innovation:  Innovation  is  essential  to 
inspiring  creativity— a  quality  every  competitive  busi¬ 
ness  fosters.  Many  technologies  foster  this  creativity, 
but  those  identified  most  often  in  this  survey  include 
Web  2.0,  wireless  networking  and  business  continuity 
planning. 

Investing  in  Innovation 

According  to  the  survey,  technologies  in  which  compa¬ 
nies  are  most  likely  to  invest  correlate  closely  to  those 
that  fuel  innovation.  The  top  investment  areas  include 
wireless  networking,  business  continuity  planning  and 
remote  access. 

“It  is  clear  from  these  survey  results  that  IT  leaders 
recognize  the  value  of  networking  technologies  that 
enhance  productivity  and  collaboration,”  says  Joe 
Lueckenhoff,  AT&T  senior  vice  president,  product 
management.  “The  game  is  changing  and  innovative 
technologies  are  driving  those  changes.” 

Bottom  line:  Nearly  half  of  the  respondents  consider 
their  companies  to  be  true  innovators  or  early  adopters 
when  it  comes  to  adopting  information  technology.  Or¬ 
ganizations  that  nurture  this  innovative  spirit  and  sup¬ 
port  it  with  smart  investments  in  technology  will  reap 
the  rewards— including  greater  productivity,  improved 
collaboration  and  a  competitive  edge. 

Go  to  www.cio.com/whitepapers/att-innovate  to 
obtain  a  free  download  of  the  research  results  with 
insightful  commentary  from  key  respondents. 


COVER  STORY  |  Business  Intelligence 


Analysts  at  Chevron  study  geologic  and 
seismic  data  to  determine  the  costs  of 
multiyear  drilling  and  exploration  projects 
says  Louie Erklich,  president  and  CIO  of 
Chevron  Information  Technology. 


most  of  the  price  of  gas,  accounting  for  73 
percent  of  today’s  $4-plus  figure,  according 
to  the  U.S.  Department  of  Energy.  Refin¬ 
ing,  meanwhile,  is  8  percent;  so  is  distri¬ 
bution  and  marketing.  The  remaining  12 
percent  goes  to  state  and  federal  taxes. 
Each  oil  company  analyzes  its  costs  and 
potential  income,  says  David  Smith,  an  IT 
consultant  to  the  oil  industry  at  Electronic 
Data  Systems,  trying  to  profit  at  each  step 
(except  for  taxes,  which  are  fixed). 

Traditional  economic  principles  of  sup¬ 
ply  and  demand  alone  fall  short  when  you 
try  to  forecast  prices,  Smith  says.  “With 
political  instability,  fear  about  Iran  and 
Iraq— those  have  ripple  effects  and  an 
emotional  response  at  the  pump,”  he 
says.  “You  have  to  blend  that  volatility 
with  real-time  market  data  and  factors 


you  can’t  predict.” 

Big  Oil’s  Big  Picture 

After  oil,  the  best  kind  of  gusher  to  dis¬ 
cover  and  manage  these  days  is  data,  and 
therefore  profits,  in  real  time.  Or  close  to 
it.  That’s  what  Hess  is  after. 

For  the  past  four  years,  the  $32  billion 
integrated  oil  company  has  been  building 
BI  systems  to  trace  and  interpret  data  from 
start  to  finish  along  the  exploration  and  pro¬ 
duction  value  chain  in  as  close  to  real  time 
as  possible,  says  Lensing. 

The  idea  is  to  be  able  to  see  activity  at  all 
its  assets  in  Norway,  Denmark,  the  U.K., 
the  U.S.,  Thailand  and  Africa.  Are  its  four 
fields  in  Equatorial  Guinea  producing  as 
expected  today?  Is  the  refinery  in  New 
Jersey  running  at  capacity,  or  can  it  take 


in  more  barrels  of  oil  before  the  end  of  the 
month?  What  have  sales  at  its  1,370  gas  sta¬ 
tions  been  since  last  Saturday  at  noon? 

No  one  business  intelligence  product 
can  do  it  all,  though.  For  financial  analy¬ 
sis,  Hess  mainly  uses  tools  from  Hyperion, 
which  Oracle  bought  last  year.  To  estimate 
how  much  oil  or  natural  gas  its  wells  can 
produce,  the  company  develops  a  model 
of  the  reservoir  terrain  based  in  part  on 
readings  from  bouncing  seismic  waves  in 
the  area. 

For  a  look  at  patterns  in  well  produc¬ 
tion,  Hess  runs  a  tool  popular  among 
pharmaceutical  firms  called  Spotfire, 
from  Tibco.  Spotfire  lets  analysts  visual¬ 
ize  data  by  producing  graphs,  charts  and 
other  pictures,  into  which  users  can  drill 
down  with  queries. 
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In  the  oil  and  gas  business,  you  are  what  you  own. 
The  amount  of  crude  waiting  to  be  refined, 

or  the  already-processed  liquid  in  storage  tanks 

ready  to  be  sold  and  delivered,  represents 
much  of  a  company’s  value  at  a  given  moment. 


The  company  is  also  installing  OSIsoft 
performance  management  software— in 
part  to  collect  operations  data— to  mea¬ 
sure,  for  example,  how  efficiently  plat¬ 
forms  and  storage  tanks  are  running. 
That  project  isn’t  finished  yet.  Meanwhile, 
Hess  receives  daily  uploads  about  the 
performance  of  its  joint  ventures,  such 
as  one  with  Shell  in  the  Gulf  of  Mexico, 
via  secured  FTP  transfers. 

One  of  the  real-time  parts  of  this  BI 
chain  is  well  data.  An  engineer  in  Hous¬ 
ton  can  monitor  drilling  activity  in  West 
Africa,  see  an  anomaly  in  how  the  drill 
bit  sinks  into  the  ocean  floor  and  can  send 
that  data  over  satellite  to  a  geoscientist  in 
Houston,  who  can  view  the  visualization 
and  e-mail  a  recommendation  on  how  to 
adjust  the  machines,  Lensing  says. 

“The  ability  for  people  on  a  platform 
to  communicate  with  people  in  the  home 
office  and  work  on  the  same  set  of  data 
means  we  can  get  more  production  done 
faster  and  more  accurately,”  he  says. 
“How  you  choose  to  analyze  the  data  and 
the  decisions  you  make— there’s  your 
competitive  advantage.” 

More  production  faster  means  Hess 
could,  in  theory,  sell  more  crude  or  refined 
products  sooner  while  market  prices  are 
high,  as  they  are  now. 

The  Cost  of  New  Business 

For  Petrobras,  an  oil  field  discovered 
off  the  coast  of  Brazil  could  become  the 
world’s  third  biggest,  after  one  in  Saudi 
Arabia  and  another  in  Kuwait.  The  poten¬ 
tial  bounty:  33  billion  barrels. 

That’s  an  unofficial  estimate  attrib¬ 
uted  in  April  to  Brazil’s  National  Petro¬ 
leum  Agency.  Petrobras  officials  decline 
to  confirm  it,  insisting  that  more  testing 
must  be  done.  Olinto  Gomes  de  Souza  Jr., 
a  senior  geologist  there,  is  helping  ana¬ 


lyze  some  of  the  test  data. 

After  four  years  of  exploration  and 
computerized  modeling,  the  company 
last  November  announced  that  it  had  hit 
oil  6,500  feet  beneath  the  ocean  surface 
and  another  16,000  feet  into  the  ocean 
floor.  Now  proof  drilling  continues,  bor¬ 
ing  through  rock  and  salt  layers  atop  the 
oil.  At  each  centimeter,  Petrobras  looks 
at  10  to  12  variables,  including  tempera¬ 
ture,  pressure,  and  weight  of  rock  and 
sediment.  Stored  in  an  Oracle  database, 
the  information  is  queried  with  analytics 
software  from  SAS  Institute. 

After  geologists  assess  the  information, 
it’s  sliced  and  diced  against  financial  reali¬ 
ties.  “The  amount  of  money  we  spend  is 
very  high— $100  million  for  a  well  alone,” 
de  Souza  says.  “We  want  to  get  it  right.” 

To  reach  its  goal  of  becoming,  one  of  the 
five  biggest  oil  companies  in  the  world  by 
2020,  Petrobras  has  to  take  some  calcu¬ 
lated  risks.  Recovering  oil  from  this  find 
will  be  expensive  partly  because  it’s  so  far 
down  in  the  earth.  “No  company  has  tried 
to  explore  under  it,”  he  says.  But  promis¬ 
ing  data  has  triggered  major  staffing  deci¬ 
sions:  Petrobras  has  created  a  new  group 
of  senior  managers  to  oversee  exploration 
of  this  area  and  plans  to  hire  14,000  drill¬ 
ers,  geologists  and  engineers. 

It  takes  years  to  go  from  initial  explo¬ 
ration  to  crude  oil  production  and  sales 
of  finished  gasoline,  so  companies  have 
to  model  markets  five,  10,  15  years  out. 
They  use  a  mix  of  their  own  intelligence 
and  public  data,  such  as  from  the  Energy 
Information  Administration  (EIA),  says 
researcher  Knapp. 

For  example,  automakers  continue  to 
improve  the  fuel  efficiency  of  their  cars 
and  light  trucks,  as  well  as  to  build  elec¬ 
tric-gas  hybrids.  By  2030,  the  average 
light-duty  vehicle  will  get  27.9  miles  per 


gallon,  40  percent  more  than  in  2006, 
according  to  the  EIA.  A  highly  simplified 
analysis  suggests  that  if  people  use  less 
gasoline,  gas  prices  should  drop,  which 
makes  expensive  drilling  less  profitable, 
Knapp  explains. 

Although  demand  for  gas  is  growing  in 
China  and  India,  so  far  it’s  not  enough  to 
offset  the  expected  drop  in  U.S.  demand. 
New  well  and  rig  technologies  could  take 
some  of  the  cost  out  of  drilling,  but  no  one 
knows  exactly  when  or  by  how  much. 

There  is  no  shortage  of  data  points;  the 
value  is  in  interpretation.  “It’s  about  filtering 
rather  than  finding  a  piece  of  information,” 
he  says.  “Understanding  what  this  whole 
pile  of  stuff  can  do  for  you  is  the  key.” 

Adjustingto  Change  in 
Rea!  Time 

Every  Wednesday  morning,  the  shouts 
and  hand  gestures  that  make  the  Nymex 
trading  floor  in  New  York  frantic  begin  to 
calm.  Petroleum  traders  are  waiting  for 
the  release  of  data  from  the  U.S.  Energy 
Information  Administration  (EIA)  on 
countries’  inventories  of  crude  oil  and 
gasoline,  as  well  as  world  crude  prices. 

At  10:30  a.m.,  the  EIA’s  website  sees 
a  storm  of  activity:  1,000  page  views  per 
second  for  15  seconds,  says  Charlie  Riner, 
a  lead  analyst  for  the  site.  Oil  companies, 
commodities  traders,  analyst  firms,  and 
government  agencies  in  the  United  States 
and  other  countries  have  written  bots  to 
collect  the  data.  Then  traffic  ebbs. 

Inventories  are  the  most  closely  watched 
data  in  the  industry,  says  Joanne  Shore,  a 
senior  petroleum  analyst  at  the  EIA,  the 
statistics  keeper  for  the  U.S.  Department  of 
Energy.  “This  is  what  moves  markets  when 
it  comes  out,”  Shore  says.  If,  for  example, 
U.S.  supplies  fall  sharply  from  the  week 
before,  that  can  mean  demand  is  rising  and 
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prices  likely  will,  too. 

It’s  not  only  traders  who  want  this  data. 
Corporations  such  as  Valero  fold  it  into  its 
analysis  of  inventories  and  market  activ¬ 
ity  so  that  they  always  know  their  stand¬ 
ing  compared  to  rivals. 

In  the  oil  and  gas  business,  you  are 
what  you  own.  The  amount  of  crude 
waiting  to  be  refined,  or  the  already-pro- 
cessed  liquid  in  storage  tanks  ready  to  be 
sold  and  delivered,  represents  much  of  a 
company’s  value  at  a  given  moment. 

As  a  refiner,  Valero  buys  barrels  of  oil 
to  heat  and  pressurize  into  other  products, 
such  as  diesel  fuel,  asphalt  and  lubricants. 
The  $95  billion  downstream  company  owns 
17  refineries  that  together  can  produce  3.1 
million  barrels  of  product  per  day. 

But  Valero  doesn’t  sell  that  much 


in  a  given  day  so  it  must  store  finished 
goods  until  they’re  ready  to  be  shipped 
to  customers.  The  company  tracks  its  own 
inventory  movements  the  way  a  first-time 
mother  studies  her  infant.  How  much  of 
which  products  did  we  sell  this  morning? 
How  about  now?  And  now? 

Market  analysts  run  inventory  reports 
“a  few  hundred  times  a  day,”  says  Kirk 
Hewitt,  vice  president  of  accounting  pro¬ 
cessing  optimization .  As  the  cost  of  crude 
fluctuates  during  trading  hours,  Valero 
sales  and  marketing  staff  want  frequent 
updates  so  they  can  sell  products  at  the 
most  profitable  price  and  buy  crude  to 
feed  their  refineries  at  the  best  price. 

“We’re  dealing  with  a  commodity 
whose  price  changes  every  second,”  Hewitt 
explains.  “So  our  margins  change  every 


minute.  Our  costs  change  every  minute.” 

Companywide,  Valero  employees 
generate  more  than  20,000  reports  per 
month.  These  range  from  gas  station 
profit-and-loss  statements  to  the  status 
of  payable  invoices  to  telecommunica¬ 
tions  charges. 

Valero  uses  WebFocus  tools  from  Infor¬ 
mation  Builders  for  nearly  all  its  BI  report¬ 
ing,  but  not  for  inventory  reporting,  which 
has  to  be  quick  and  dirty.  For  that,  users 
query  Valero’s  SAP  Business  Warehouse 
system,  which  collects  operations  data 
from  the  SAP  R/3  system  at  Valero’s  refin¬ 
eries.  Data  includes  items  such  as  the  vol¬ 
ume  of  crude  processed  and  the  amount  of 
products  made  from  it.  The  information  is 
presented  in  an  Excel  spreadsheet,  he  says, 
because  “it’s  a  fast  way  to  get  a  snapshot.” 

Valero  wants  to  make  its  BI  faster  over¬ 
all.  Now  most  reports  use  information  from 
data  warehouses  populated  each  night 
with  batch  updates  from  SAP.  But  Hewitt 
says  moving  to  a  service-oriented  architec¬ 
ture  will  enable  more  frequent  updates,  so 
the  analysts  can  query  more  current  data 
throughout  the  day.  The  company  is  work¬ 
ing  with  SAP  to  implement  SAP  Exchange 
Infrastructure,  or  XI,  to  make  that  happen. 
Valero  will  still  use  WebFocus  for  what-if 
analysis  and  report  presentation,  he  says. 

Though  the  technology  is  changing, 
the  purpose  of  the  analysis  isn’t.  Valero 
monitors  the  value  of  its  inventory,  along 
with  sales  and  efficiency  at  its  gas  sta¬ 
tions,  to  make  adjustments  to  the  price 
of  its  products  as  it  watches  demand  and 
supply  shift.  Just  because  gas  prices  are 
soaring  doesn’t  mean  Valero  has  an  easy 
ride.  Aside  from  gasoline,  the  company 
makes  asphalt,  sulfur  and  other  sec¬ 
ondary  products.  These  prices  haven’t 
increased  as  much  as  gasoline  has,  or  in 
proportion  to  the  rise  in  the  cost  of  crude 
needed  to  make  them.  Valero  has  to  bal¬ 
ance  its  dependencies. 

Managing  X-Factors 

Financial  markets  often  move  on  fear 
and  uncertainty.  The  problem  is,  no  one 
can  predict  which  direction  commodity 
prices  will  go  in  or  how  much  they  will 
gain  or  lose. 


What  Goes  into  the 


Average  Price 
Per  Gallon 

2004:  $1.85 
2008:  $4.03* 

*June  2.  2008 


Increases  in  the  price 
per  barrel  of  crude 
is  the  biggest  reason 
why  the  price  at  the 
pump  keeps  climbing. 

Oil  companies  have 
maintained  profits  by 
managing  their  costs 
for  distribution,  mar¬ 
keting  and  refining. 


71% 


Distribution 

and 

Marketing 


Refining 


Taxes 


Industry  Costs  by  Category 

2004  m  2008  ■ 

(Numbers  may  not  add  to  100%  due  to  rounding.) 

SOURCE:  Energy  Information  Administration  and  Nymex 
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ILLLUSTRATION  BY  MARC  BROWN 


BREAKING  THROUGH  THE 


@  Research  affirms 
that  CIOs  are 
becoming  business 
strategists,  as 
evidenced  in 
their  confidence 
about  overcoming 
economic  conditions 
and  meeting 
business  objectives. 

H he  overarching  goal  for  today's  IT  leaders  is 
to  develop,  align  and  embrace  strategies  that 
can  yield  profit  increases,  cost  reductions  and 
new  levels  of  agility.  However,  the  reality  is  that 
day-to-day  activities  are  often  overwhelming  and 
ultimately  disrupt  priority  alignment.  How  have 
leading  CIOs  been  able  to  break  this  barrier? 

As  the  most  recent  CIO  magazine  "State  of  the 
CIO"  report  demonstrates,  the  CIO's  role  has 
seen  a  true  transformation,  with  most  CIOs 
now  falling  into  one  of  three  archetypes:  the 
functional  head,  the  transformational  leader 
and  the  business  strategist.  Furthermore,  it 
is  becoming  evident  that  CIOs  are  steadily 
working  toward  fully  embodying  the  role  of 
business  strategist. 


li  is  difficult  and  frustrating  when  you  find 

yourself  in  a  position  where  you  know  what  must  be  done 
while  the  circumstances  of  your  environment  make  it  seemingly 
impossible  to  accomplish  your  goals. 

As  a  recent  IDG  Research  survey  shows,  this  is  exactly  where 
many  CIOs  find  themselves  today.  They  have  thoroughly 
embraced  the  concept  of  aligning  IT  with  business  strategies, 
yet  because  of  the  state  of  the  economy,  they  find  they  must 
continuously  reallocate  resources  to  put  out  daily  fires  rather 
than  work  toward  strategic  business  and  IT  goals. 

Fortunately,  most  CIOs  are  taking  this  in  stride.  According  to 
the  results,  75  percent  of  IT  leaders  are  maintaining  a  positive 
outlook  despite  the  economic  challenges  they  face. 

One  of  the  most  encouraging  discoveries  in  this  IDG  survey  is 
the  strength  of  the  relationship  between  CIOs  and  their  senior- 
level  counterparts.  When  asked  to  describe  the  relationship 
between  IT  and  executive  management,  they  most  frequently 
described  it  as  cooperative,  collaborative,  supportive  and 
strategic.  The  ways  CIOs  nurture  these  relationships  could 
prove  crucial  as  they  continue  to  transform  themselves  into 
what  CIO  magazine's  "State  of  the  CIO"  report  calls  the 
"business  strategist"  CIO. 

I  wish  you  great  success  as  you  make  your  way  through  these 
challenging  business  times.  One  word  of  advice:  Remember 
that  you  are  not  alone  as  you  struggle  to  make  the  most  of  the 
resources  available  to  you.  At  times  it  may  seem  like  a  winless 
battle,  but  persistence  and  best  practices  definitely  keep  the 
journey  alive.  At  HP  Software,  our  goal  is  to  provide  industry 
leaders  such  as  you  with  solutions  that  deliver  business  outcomes 
you  can  count  on,  easing  the  journey  to  long-term  success. 


Custom  Solutions  Group 


To  connect  with  my  executive  team  and  me,  please  visit 

www.hp.com/go/hpsoftwarecio. 


Best  regards, 

Thomas  E.  Hogan 

Senior  Vice  President 
HP  Software 

Technology  Solutions  Group 
Hewlett-Packard  Company 
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BREAKING  THROUGH  THE  BARRIERS 


This  shift  becomes  increasing  clear  in 
view  of  CIOs'  most  prevalent  goals  and 
activities.  According  to  a  recent  IDG 
Research  Services  survey,  IT  leaders  today 
spend  the  majority  of  their  time: 


Strategically  aligning  IT  with  business 
goals 

Creatively  improving  IT  operations 
Implementing  new  systems  and 
architecture 

Cultivating  the  IT/business  partnership 
Leading  change  efforts 


Ail  of  these  activities  show  great  promise 
for  the  CIO  role,  especially  when  coupled 
with  noticeably  improved  and  blossoming 
relations  with  CEOs  and  other  C-level 
counterparts. 


"There  is  no  question  that  our  businesses 
expect  us  to  make  the  most  of  all 
available  resources,"  says  Ken  Kroeger, 
CIO,  Kutak  Rock  LLP,  a  national  corporate 
law  firm  with  1 5  offices  and  more  than 
400  attorneys.  "In  doing  so,  we  need  to 
continue  sticking  to  our  core  strengths 
while  working  diligently  to  shorten 
delivery  cycles  and  yield  earlier  success 
points.  Success  in  light  of  uncertainties 
will  be  a  testament  to  our  ability  to 
adequately  understand  the  business 
model,  properly  embrace  the  tolerances 
for  service  and  deliver  aligned  solutions." 


Environmental  Realities 

Ideally,  moving  toward  the  business 
strategist  archetype  presents  an  intriguing 
opportunity  that  enables  CIOs  to  build 
momentum  and  increase  corporate 
presence.  However,  at  the  same  time, 
organizations  are  placing  more-stringent 
demands  on  their  IT  departments,  and  the 
market  conditions  are  far  from  ideal. 


Today's  economy  is  uncertain  at  best. 

The  IDG  survey  reveals  that  87  percent 
of  respondents  believe  that  the  U.S.  is 
already  in  or  likely  to  be  in  a  recession 
within  the  next  six  months.  Furthermore, 
respondents  say  that  factors  such  as  rising 
energy  costs  (69  percent),  an  unstable 


economy  (78  percent)  and  stock  market 
performance  (56  percent)  will  negatively 
influence  their  ability  to  achieve  their  top 
business  goals  over  the  next  1 8  months. 


The  most  telling  factor  may  ultimately  rest 
with  the  specific  impact  the  economy  has 
on  IT  budgeting,  which  respondents  expect 
to  increase  only  2  percent.  Yet,  the  question 
remains:  Will  anticipated  funding  mean 
stringent  spending  limits,  or  will  dynamic 
leaders  take  more  strategic  risks  that  result 
in  a  dramatic  reallocation  of  funds? 


"Budgetary  uncertainty  makes  strategic 
reevaluations  of  priorities  a  necessity, 
which  may  ultimately  include  temporarily 
delaying  some  projects  and  stretching 
replacement  cycles  so  that  we  can  best 
address  the  most-pressing  needs,"  says 
Kroeger.  "There  is  a  need  to  do  more  with 
less,  especially  considering  that  economic 
uncertainty  influences  business  units  to 
take  a  dim  view  of  any  change." 


Eye  on  the  Future 

The  economic  picture  may  not  be  pretty, 
but  three  quarters  of  the  respondents 
still  remain  extremely  or  very  confident 
in  their  ability  to  manage  through  a 
recession.  Such  confidence  may  be  a  sign 
of  seasoned  leaders'  accepting  that  the 
challenges  ahead  are  unavoidable  and  can 
be  met  with  previous  experience. 


It  may  also  point  to  the  willingness  of 
progressive  CIOs  to  hedge  their  futures 
on  promising  solutions  that  can  lead  their 
organizations  through  the  most-difficult 
times.  For  example,  the  survey  identified 
virtualization  (55  percent),  infrastructure 
management  (40  percent)  and  business 
continuity/availability  (37  percent) 
solutions  as  the  key  areas  of  investment 
over  the  next  year. 


These  specific  technologies,  coupled  with 
proven  IT  strategies  such  as  business 
technology  optimization  and  business 
information  optimization,  may  provide  the 
arsenal  needed  to  break  free  from  the  ties 
that  bind. ® 


strategic 
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Will  They  Follow? 

Pathways.  Turning  today’s  IT  professionals  into  tomorrow’s  business  leaders. 

You’ve  set  the  pace.  But  is  your  team  prepared  to  keep  up  with  the  momentous  challenges  they  will  face 
as  our  future  CIOs  and  business  leaders? 

Designed  by  CIOs,  Pathways  is  a  comprehensive  program  for  succession  planning  and  staff  development. 
Pathways  begins  with  a  robust  executive  competencies  assessment  to  identify  individual  strengths  and 
opportunities  for  growth.  Driven  by  these  results,  members  pursue  three  distinct  areas  of  development: 

•  Business:  Veteran  CIOs  mentor  intimate  groups  of  participants  on  the  corporate  politics 
and  pressures  of  the  executive  level. 

•  Leadership:  Twice-monthly  web  seminars  address  specific  executive  core  competencies. 

•  Technology:  Online  global  communities  provide  peer-to-peer  management  insights  in 
key  technology  functions. 

Help  tomorrow’s  leaders  gain  more  of  the  insight  and  knowledge  they  need  to  build  toward  the  next  big 
step  in  their  careers.  Visit  www.cioexecutivecouncil.com/pw01  to  learn  more  about  Pathways  and 
to  enroll  your  team  today. 


Pathways  enrollment  includes  complimentary  attendance  at  the  CIO  100  Symposium  &  Awards  (a  $1,895  value) 

August  24-26,  2008,  Colorado  Springs,  CO 


Pathways 

Advancing  Business,  Technology  &  Leadership  Excellence 


Powered  by 

rMTHI  CIO  Executive  Council 

Lw  Leaders  Shaping  the  Future  of  Business 


The  Pathways  program  is  offered  by  the  CIO  Executive  Council,  a  member-led  executive  organization,  consisting  of  current 
and  future  business  leaders  working  to  impact  the  intersection  of  business,  technology  and  strategy.  The  CIO  Executive  Council's 
mission  is  to  foster  measurable  value  for  all  members  by  enabling  them— through  peer  reliance  and  outreach— to  apply  the 
knowledge,  insights  and  best  practices  of  their  peers  to  the  success  of  their  enterprise  and  personal  achievement.  To  learn  more 
about  the  CIO  Executive  Council,  visit  www.cioexecutivecouncil.com. 


It’s  a  powerful  notion  to  run  a  company 
with  the  mind- set  that  virtually  every  employee 

is  a  data  analyst.  “Engineers  and  geoscientists  and 
everyone  have  been  taught  BI  from  the  start.” 

-GARY  LENSING,  CIO,  GLOBAL  EXPLORATION  AND  PRODUCTION,  HESS 


On  April  21,  news  spread  that  unidenti¬ 
fied  attackers  had  punctured  a  Japanese 
oil  tanker  with  rockets  while  the  ship  was 
sailing  to  Saudi  Arabia.  That  same  day, 
Royal  Dutch  Shell  announced  that  Afri¬ 
can  militia  fighters,  protesting  corporate 
oil  activity  on  the  Niger  Delta,  had  dam¬ 
aged  a  pipeline  in  Nigeria.  Worried  about 
oil  supplies,  traders  pushed  oil  to  $117  per 
barrel,  setting  a  new  record. 

Then  there  are  less-violent  but  no 
less-volatile  events.  Hurricanes  such  as 
Rita  and  Katrina  in  2005,  say,  or  refinery 
explosions.  Downtime  at  even  one  major 
refinery  from  a  fire  or  explosion  can  drag 
down  earnings  at  that  company  and  affect 
the  rest  of  the  industry  for  years.  Literally. 


BP,  the  $21  billion  British  oil  company, 
has  paid  in  financial  terms  and  human 
lives.  In  2005,  explosions  and  fire  at  BP’s 
refinery  in  Texas  City,  Texas,  killed  15 
people  and  hurt  170  others.  The  refinery, 
which  by  itself  makes  about  2.5  percent  of 
all  the  gasoline  sold  in  the  United  States, 
had  to  be  partially  closed.  Then  it  suffered 
damage  from  Rita  and  Katrina  later  that 
year  and  didn’t  reopen  completely  until 
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this  past  February.  BP’s  profits  in  the  U.S. 
have  dropped,  in  part  because  of  the  Texas 
City  disaster,  from  $12.6  billion  the  year  the 
refinery  blew  up  to  $7.4  billion  last  year, 
according  to  BP’s  latest  annual  report. 

Chevron,  meanwhile,  noted  in  its 
annual  report  that  although  product 
margins  for  the  oil  industry  were  gener¬ 
ally  higher  for  2007,  profit  margins  on 
Chevron’s  refined  products  “were  nega¬ 
tively  affected  by  planned  and  unplanned 
downtime  at  its  three  largest  U.S.  refiner¬ 
ies.”  Because  of  the  problems,  Chevron’s 
U.S.  refineries  ran  at  85  percent  capacity 
for  crude  oil  distillation  in  2007,  down 
from  99  percent  in  2006.  Chevron’s  U.S. 
downstream  profits  dipped  to  $966  mil- 
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lion  from  $1.9  billion  in  2006. 

Smith,  the  EDS  consultant,  says  com¬ 
petitors  should  have  BI  in  place  to  assess 
an  event  like  BP’s  Texas  City  disaster  or 
Chevron’s  partial  shutdowns  immediately. 
“If  I’m  Shell,  I  should  understand  what’s  the 
opportunity”  to  fill  gas  orders  that  BP  and 
Chevron  might  not  be  able  to,  he  says. 

The  Federal  Reserve  Bank  of  Dallas  has 
developed  a  model  to  forecast  the  price  of 
gasoline  that  accounts  for  surprise  events. 
Stephen  Brown,  director  of  energy  eco¬ 
nomics  and  microeconomic  policy  analy¬ 
sis  there,  uses  a  combination  of  Excel  and 
EViews,  a  Microsoft  Windows-based 
application  designed  to  perform  regression 
analysis.  EViews  comes  from  Quantitative 
Micro  Software,  a  privately  held  com¬ 
pany  in  Irvine,  Calif.  Unlike  most  BI  tools, 
EViews  was  designed  specifically  for  ana¬ 
lyzing  time-series  data.  Advanced  regres¬ 
sion  analysis  capabilities  aren’t  usually 
part  of  mainstream  BI  tools,  although  SAS 
and  SPSS  offer  some.  Universities  some¬ 
times  provide  such  tools  (for  free,  even), 
including  Pennsylvania  State  University’s 


Easy  Reg  and  University  of  Minnesota’s  Arc 
Software. 

First,  Brown  assumes  that  a  certain 
number  of  unpredictable  events  will 
happen  in  a  given  year.  For  example, 
some  refineries  will  shut  down  for  some 
period  because  of  fires  or  hurricane  dam¬ 
age.  Brown  looks  at  refinery  histories  to 
calculate  an  average  outage,  then  sets  his 
model  to  account  for  it.  “We  have  said 
that  all  these  unusual  events  that  have 
occurred  in  past  are  going  to  occur  on 
average  in  the  future  as  they  have  in  the 
past,”  he  explains. 

What  Brown’s  model  can’t  account  for 
is  politics.  There’s  no  way  to  calculate  an 
average  impact  of  country  leaders  acting 
erratic— something  the  $214  billion  Chev¬ 
ron  must  deal  with.  About  26  percent  of 
its  proven  oil  reserves  are  in  Kazakhstan, 
the  company  says.  Kazakhstan  isn’t  the 
most  stable  of  countries.  It  broke  off  from 
Russia  in  1991  and  is  now  ruled  by  a  presi¬ 
dent  granted  lifetime  powers  and  immu¬ 
nity  from  criminal  prosecution. 

Chevron  does  not  comment  on  the  secu¬ 


rity  of  company  personnel  or  operations, 
according  to  a  spokesman,  Sean  Comey. 
However,  in  its  latest  annual  report,  Chev¬ 
ron  lists  the  Kazakhstan  operation  under 
the  warning  “Political  instability  could 
harm  Chevron’s  business.” 

From  Wildcat  to  Datacrat 

No  one  argues  that  oil  isn’t  one  heck  of  a 
lucrative  industry.  And  all  those  profits 
don’t  come  from  good  business  intelligence 
practices  alone.  But  it’s  a  powerful  notion  to 
run  a  company  with  the  mind-set  that  virtu¬ 
ally  every  employee  is  a  data  analyst. 

“Engineers  and  geoscientists  and  every¬ 
one  have  been  taught  BI  from  the  start,” 
says  Lensing,  the  Hess  CIO.  Give  people  in 
any  industry  access  to  information  along 
with  tools  to  interpret  the  past,  model 
the  future  and  imagine  different  paths 
between  the  two,  he  says,  and  they  can 
change  the  trajectory  of  companies.  BZ3 


Senior  Editor  Kim  S.  Nash  can  be  reached  at 
knash@cio.com.  To  comment  on  this  story,  go 
to  www.cio.com/article/375365. 


All  those  competing  information  requests  can  make  you  dizzy. 

The  CEO  needs  to  know  P&L  performance  by  business  unit.  The  CFO  needs  to  know  he’s  meeting  compliance 
regulations.  And  a  dozen  business  managers  need  to  know  how  to  increase  output  but  not  staff. 

Trying  to  help  them  all  isn’t  easy.  But  it  could  be  easier  —  with  IBM  Cognos  8  Business  Intelligence,  part 
of  IBM’s  Information  on  Demand  solutions  for  business  optimization.  With  Cognos,  you  can  minimize 
competing  requests  by  empowering  users  to  easily  find  what  they  need.  And,  with  our  open,  Web-based  SOA, 
you  can  seamlessly  integrate  our  solution  into  your  existing  environment.  Plus,  only  Cognos  provides  the 
added  value  of  expertise  and  best  practices  with  industry-specific  blueprints  and  BI  Competency  Center 
development  —  which  means  you’ll  always  stay  on  solid  footing. 

Proceed  with  confidence/'  To  find  out  more,  visit  www.cognos.com/terrafirma  today. 


Copyright  ©  2008  Cognos  ULC,  an  IBM  company. 
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Wyeth's 


The  drug 
giant  laid  the 
groundwork 
for  early  success 
by  putting 
business 
process  ahead 
of  technology 


For  a  pharmaceutical  company  like  Wyeth,  no 
function  is  more  important  than  research  and  develop¬ 
ment— the  process  of  finding  the  new  drugs  that  will  lead 
to  patents  and  profits.  And  for  the  information  systems 
group  that  supports  R&D,  business  process  management 
(BPM)  is  emerging  as  a  key  technology  and  management 
strategy  to  make  that  function  more  efficient. 


Reader  ROI 

::  The  importance  of  a 
business  mandate 

::  How  BPM  tied 
processes  together 
across  systems 

”  Why  success  breeds 
adoption 


In  fact,  R&D’s  early  success  at  using  this  technology  and  method¬ 
ology  to  cut  software  development  time  in  half  has  sparked  interest 
from  other  divisions  of  the  company  looking  to  start  their  own  BPM 
projects.  But  for  Wyeth,  the  real  payoff  lies  in  BPM’s  potential  to  help 
the  company  defi  ne  business  processes  and  unify  its  information  sys¬ 
tems  to  break  down  barriers  between  organizational  and  geographic 
divisions  and  to  improve  collaboration  and  innovation. 
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For  Wyeth  CIO  Jeffrey 
E.Keisling  (right)  and 
Jazz  Tobaccowalla, 

VP  of  IS  for  R&D,  (left), 
BPM’s  real  promise 
lies  in  its  ability  to 
break  down  silos  and 
encourage  collabora¬ 
tion  across  functions. 


ADVERTISING  SUPPLEMENT 


While  server 


virtualization 
enables  data 
centers  to 
make  better  use 
of  resources, 
managing  a  virtual 
environment 
is  a  challenge. 

HP  offers  a 
comprehensive 
set  of  integrated 
products  that 
allow  data  centers 
to  seamlessly 
manage  physical 
and  virtual  assets 


Executive  Summary  |  In  today's  dynamic  business  environment,  CIOs  are  being 
called  upon  to  provide  their  organizations  with  flexible  and  robust  computing 
resources  that  can  accommodate  rapidly  changing  business  needs.  The  challenge 
is  twofold:  How  can  CIOs  deliver  adaptive  business  technologies  and  at  the  same 
time  cost-effectively  ensure  quality  of  service  and  improve  manageability? 

In  a  CIO  magazine  survey  on  virtualization  in  the  enterprise,  published  in  January 
2008,  respondents  cited  the  following  as  top  reasons  to  virtualize: 


•  Cut  costs  via  server  consolidation - 81% 

•  Improve  disaster  recovery  and  backup  plans - 63% 

•  Provision  computing  resources  to  end  users  more  quickly—  55% 

•  Offer  more  flexibility  to  the  business - 53% 

•  Provide  competitive  advantage - 13% 


HP  offers  a  variety  of  integrated  virtualization  solutions  that  can  help  CIOs  not 
only  deliver  the  business  technology  that  their  organizations  require  but  also 
boost  the  efficiency  of  IT  operations  and  increase  competitive  advantage. 


Custom  Solutions  Group 


HP  helps  CIOs  address  the  challenges  of  increasing  IT  complexity  by  deploying  an  adaptive 
infrastructure  built  on  modular  systems,  software  and  services  designed  to  drive  down 
costs  and  improve  service  levels.  Virtualization  is  a  key  component  of  this  infrastructure 
that  enables  midsize  and  large  enterprises  to  pool  and  share  IT  resources  to  maximize 
utilization,  enable  consolidation,  reduce  costs  and  increase  agility. 

However,  virtualization  can  bring  new  challenges,  including  virtual  server  sprawl. 

HP's  integrated  solutions  can  help  CIOs  manage  virtualization  from  the  desktop  to 
the  data  center.  At  the  heart  of  these  virtualization  technologies  are  the  management 
infrastructure  capabilities  that  differentiate  HP  from  its  competitors. 


ADVERTISING  SUPPLEMENT 


HP  ProLiant  iVirtual ization  addresses  another  challenge  of  virtualization-the 
sometimes  lengthy  process  of  installing  and  integrating  a  virtual  environment. 

ProLiant  iVirtualization  is  the  only  out-of-the-box  virtualization  offering  that  fully 
integrates  with  core  server  management  tools,  allowing  customers  to  rapidly  and 
easily  implement  a  virtualized  server  environment.  ProLiant  iVirtualization  integrates 
virtualization  technologies  into  the  ProLiant  platform;  joining  forces  with  leading 
virtualization  partners,  HP  offers  flexibility  through  VMware  ESXi  and  Citrix  XenServer 
integration,  and  will  offer  Microsoft  Hyper-V  integration  in  the  future. 

By  leveraging  the  integrated  management  tools  in  HP  Insight  Control,  ProLiant 
iVirtualization  increases  business  agility,  improves  quality  of  service  and  streamlines 
infrastructure  management.  For  example,  IT  staff  can  save  time  by  configuring  servers 
and  VMs  through  easy  set-upand  installation.  The  unique  ProLiant  Virtual  Console, 
with  HP-integrated  Citrix  XenServer,  enhances  the  simplicity  and  manageability  of  a 
virtualized  server  from  either  the  local  console  or  remotely  via  HP  Integrated  Lights  Out 
(iLO)  Advanced. 

With  ProLiant  iVirtualization,  IT  organizations  can  take  advantage  of  the  proven 
efficiencies  provided  through  the  tools  in  HP's  Insight  Control  portfolio,  including: 

►  HP  Systems  Insight  Manager  (SIM)— This  platform  management  tool  can 
manage  the  hardware  across  the  HP  infrastructure,  including  ProLiant  servers 
using  ProLiant  iVirtualization. 

►  HP  Virtual  Machine  Manager-VMM  links  the  powerful  hardware 
management  of  SIM  with  the  virtual  machine  management  capabilities  from 
VMware,  Citrix  and  Microsoft. 

►  HP  Server  Migration  Pack- Universal  Edition  (SMP  Universal) — Built  specifically 
for  HP  ProLiant  and  HP  BladeSystem  servers,  this  server  migration  tool  features 

a  single  interface  for  automating  both  physical  and  virtual  migrations. 

HP  ProLiant  iVirtualization  complements  HP  Insight  Dynamics-VSE,  a  new  class 
of  management  software  that  allows  CIOs  to  continuously  analyze  and  optimize 
an  adaptive  infrastructure.  HP  Insight  Dynamics-VSE  is  the  world's  first  integrated 
solution  that  lets  CIOs  manage  both  physical  and  virtual  resources  in  exactly  the  same 
way.  It  enables  a  change-ready  infrastructure,  with  all  the  freedom  and  flexibility  of 
virtualization  delivered  across  your  physical  infrastructure. 

Moreover,  HP  Insight  Dynamics-VSE  reduces  the  costs  associated  with  common 
data  center  tasks,  such  as  capacity  planning,  provisioning,  upgrades  and  energy,  by  as 
much  as  40  percent.  The  speed  of  change  is  increased  as  well  by  collapsing  steps  and 
saving  administrative  time  on  key  tasks.  And  everyday  high  availability,  which  was 
previously  unavailable  for  many  applications  due  to  complex  clustering  requirements, 
can  be  improved. 

HP  Insight  Dynamics-VSE  is  the  industry's  most  advanced  real-time  capacity 
planning  tool.  It  allows  CIOs  to  continuously  analyze  server  capacity  and  power  use.  It 
addresses  the  toughest  technology  challenges  and  top  business  priorities  in  previously 
unimaginable  ways. 


Virtualization  Leadership 

#1  virtualization  platform  driven  by  end-to-end  approach 

Automation  ► 

Software 
Infrastructure  ► 

Software 
Network 
Fabric 

Server  ► 


process  automation  +  change  management  via  HP  Software 
Insight  Dynamics-VSE 
Virtual  Connect 


iVirtualization  linkage  with  SIM  and  iLO 


moreover,  HP  Insight 
Dynamics-VSE  reduces  the 
costs  associated  with  common 
data  center  tasks,  such  as 
capacity  planning,  provisioning, 
upgrades  and  energy,  by  as 
much  as  kO  percent 


The  Desktop  |  The  desktop  landscape  is  changing 
rapidly.  Among  the  top  challenges  are  compliance  and 
security  issues,  providing  consistent  support  for  teams 
located  both  onshore  and  offshore,  supporting  enhanced 
business  continuity  and  disaster  recovery,  delivering 
resources  to  a  diverse  workforce  and  managing  a  complex 
array  of  hardware. 

HP  helps  CIOs  tackle  each  of  these  challenges  with  HP 
Virtual  Desktop  Infrastructure  (VDI),  a  virtual  desktop 
infrastructure  solution  ranging  from  servers,  storage  and 
software  to  management,  access  devices  and  services. 
With  HP  VDI,  CIOs  can  leverage  the  full  line  of  HP  ProLiant 
and  BladeSystem  servers,  as  well  as  HP  StorageWorks,  HP 
management  software  and  HP  thin  clients,  to  solve  the 
most  vexing  challenges  in  desktop  management. 

"We  looked  at  a  lot  of  options,  and  the  fluidity  of 
the  HP  solution  wasjust  incredible,”  says  Thomas  Petry, 
director  of  technology  for  Collier  County  Public  Schools. 
"The  goal  was  to  save  money,  but  also  for  users  not 
to  notice  anything  different.  They  don't  know  what  a 
virtualized  desktop  is,  but  they  do  know  that  they're  always 
able  to  get  their  PC  from  anywhere, 
and  they  love  it." 

HP  Systems  Insight  Manager 
allows  for  centralized  control  of 
servers  and  storage  infrastructure,  and 
underscores  the  unified  infrastructure 
management  strategy  at  HP.  In  fact, 
a  recent  study  with  IDC  showed 
customers  that  leveraged  the  entire 
Insight  Control  Environment  suite  were 
able  to  achieve  an  ROI  of  563  percent 
over  a  three-year  period,  yielding 
$48,380  in  savings  per  100  users.1 

By  managing  virtualized 
environments  with  HP's  integrated 
virtualized  solutions,  IT  can  spend  less  on  hardware  and 
floor  space,  and  reduce  operating  expenses  by  spending 
less  on  power  and  cooling.  Yet  reducing  costs  means  little 
if  service  to  the  business  is  compromised.  Using  a  variety 
of  integrated  virtualization  solutions  from  HP,  CIOs  can 
deliver  the  business  technology  that  their  organizations 
require  and  boost  the  efficiency  of  IT  operations. 


Find  ouh  more: 

•  www.hp.com/go/ 
easierdone 

•  www.hp.com/go/ 
insightcontrol 

•  www.hp.com/go/ 
iceroipaper 

•  www.hp.com/go/ 
insightdynamics 

•  www.hp.com/go/vdi 


IDC  White  Paper  sponsored  by  HP,  "Gaining  Business  Value  and  ROI  for  HP  Insight  Control, " 
Doc  #210479,  February  2008. 


Business  Process  Management 


“The  demand  is  very  high  for  connecting  what  used  to  be 
stovepiped  systems,”  says  CIO  Jeffrey  E.  Keisling. 

That  demand  is  driven  in  part  by  the  global  nature  of  the  phar¬ 
maceutical  industry,  in  which  virtual  teams  from  different  busi¬ 
ness  units  around  the  world  work  together  to  develop  new  drugs 
and  related  innovations.  “As  we  develop  products,  that  develop¬ 
ment  is  happening  on  a  worldwide  scale,”  says  Keisling. 

For  example,  one  current  BPM  project  targets  the  process  for 
developing  medication  labeling  documents,  which  involves  col¬ 
laboration  across  many  stakeholders  and  approvals  that  have  to 
be  obtained  from  regulators  worldwide,  Keisling  says. 


The  process  is  almost  as  involved  as  the  application  for  a  new 
drug  approval,  he  says.  Wyeth  has  to  detail  the  composition 
of  the  medicine  with  molecular  diagrams,  explain  restrictions 
on  its  use  and  document  known  drug  interactions— all  to  pro¬ 
duce  the  folded  piece  of  paper  you  find  inside  each  package.  The 
application,  which  is  still  under  development,  will  need  to  reach 
across  R&D,  clinical  trials,  and  legal  and  regulatory  review. 

The  fact  that  Wyeth  would  trust  such  a  critical,  regulated  pro¬ 
cess  to  BPM  is  a  vote  of  confidence  in  the  approach,  says  Keis¬ 
ling.  (A  Wyeth  BPM  project  was  selected  to  receive  a  2008  CIO 
100  award.  Read  about  it  at  www.cio.com/ciolOO/2008/5.) 


Tools  for  Business 
Process  Management 

A  look  at  some  of  the  leading  BPM  vendors  and  their  offerings 


The  BPM  vendors  below 
were  identified  as  lead¬ 
ers  in  Gartner’s  “Magic 
Quadrant,"  signifying  a 
combination  of  vision  and 
execution. 

Pegasystems  |  TheSmart- 
BPM  Suite  is  a  highly  inte¬ 
grated  product  with  many 
features  to  support  agility, 
accelerate  the  modeling 
of  process  workflow  and 
deploy  applications  across 
a  variety  of  thin-ciient  and 
rich-client  user  interfaces. 

Savvion  BusinessMan- 
ager  7.0  is  one  of  the  most 
mature  BPM  suites,  able 
to  handle  high-volume 
workflows  requiring  tight 
coordination  of  people  and 
systems.  Boasts  process¬ 
modeling  and  repository 
tools  that  are  accessible 
to  business  users. 

Lombardi  Provides  an 
environment  for  incremen¬ 
tal,  business-driven  process 
improvement.  Lombardi 
Teamworks  6  earns  high 
marks  from  both  business 
and  IT. 


BEA  Systems  j  Its  Aqua- 
Logic  BPM  Suite  lets  busi¬ 
ness  users  collaborate  with 
IT  during  all  phases  of  the 
business  process  life  cycle. 
However,  integration  with 
other  BEA  middleware  prod¬ 
ucts  is  a  work  in  progress. 

Tibco  Business  Studio 
2.0  is  an  Eclipse-based, 
unified  design  environment 
that  supports  business 
process  analysts  and  devel¬ 
opers  and  is  compliant  with 
key  standards.  Provides  a 
highly  graphical  process 
simulation  tool.  Integration 
with  other  Tibco  middle¬ 
ware  needs  work. 

Metastorm  j  As  the  lead¬ 
ing  BPM  vendor  on  the 
Microsoft  platform,  it  has 
broadened  its  suite  with 
a  string  of  acquisitions. 
Built-in  rule  processing 
technology  is  “somewhat 
simplistic,”  although  the 
suite  supports  external 
rules  engines  like  Fair 
Isaac’s  Blaze  Advisor  or 
Microsoft's  BizTalk  Server 
Business  Rules  Engine. 


Appian  Appian  Enter¬ 
prise  provides  a  thin-client 
architecture  for  design  time 
and  run  time,  which  also 
allows  the  company  to  offer 
a  software-as-a-service  ver¬ 
sion  of  the  system  known 
as  Appian  Anywhere. 
Another  strength  is  a  com¬ 
plimentary  business  intel¬ 
ligence  product,  Analytics 
Everywhere,  for  analysis  of 
process  data. 

IBM  IBM  brings  a  broad 
array  of  technologies, 
consulting  resources 
and  partners  to  bear  on 
accelerating  user  adoption 
of  BPM  as  a  management 
discipline.  IBM’s  BPM 
strategy  encompasses 
many  products  from 
divisions  such  as 
WebSphere,  Lotus,  Tivoli, 
FileNet  and  Rational, 
so  that  customers  are 
presented  with  a  menu 
of  choices  rather  than  a 
single  suite. 


Global  360  Best  known 
for  its  Process360  BPMS 
for  the  Microsoft  platform, 
although  it  also  offers  pro¬ 
cess  management  com¬ 
ponents  (including  some 
for  the  Java  server  market) 
for  those  enterprises  that 
don’t  want  to  purchase  a 
full  suite. 

Software  AG  Its  Web- 
Methods  BPMS  appeals  to 
business  users  that  need 
to  continuously  modify 
and  improve  business 
processes  via  a  model- 
driven  approach,  while  also 
addressing  IT  requirements 
such  as  process  life-cycle 
governance. 

Others  Gartner  ranked 
Oracle  and  Adobe  as 
challengers  with  a  less 
complete  vision  of  BPM, 
and  identified  SunGard 
as  a  visionary  that  needs 
to  improve  its  ability  to 
execute.  Since  the  report 
was  published,  Oracle  has 
completed  the  acquisition 
of  BEA  and  broadened  its 
BPM  portfolio.  -D.C. 
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“[BPM]  gives  us  a  consistent  way  of  doing  things  and  a  way  to 
capture  knowledge— everything  that  we  can  lose  when  people 
leave  or  people  forget." 

-JAZZ  TOBACCOWALLA,  VP  OF  IS,  RESEARCH  &  DEVELOPMENT 


So  far,  Wyeth  seems  to  have  avoided  the  technology  and 
governance  pitfalls  that  have  dogged  some  other  implementa¬ 
tions  (see  “Business  Process  Management:  A  Hot  Area  That’s 
Still  Immature,”  at  wwzv.cio 
.  com/article/331113 ) . 

Keisling  says  the  main 
governance  issue  he  sees  is 
connecting  the  BPM  exper¬ 
tise  emerging  within  the 
company  with  the  projects 
that  will  deliver  the  greatest 
return  on  investment.  “Right 
now,  our  biggest  challenge  is 
portfolio  management,”  he 
says. 

BPM  is  definitely  a  to- 
do  list  item  for  companies 
today.  But  many  CIOs  and 
businesses  have  struggled 
to  make  it  work.  Wyeth’s 
experience  offers  a  window 
on  what  makes  a  successful 
BPM  initiative. 

Put  Business  First 

Part  of  the  reason  for  Wyeth’s 
success  is  that  its  BPM  proj¬ 
ects  have  been  defined  with 
the  emphasis  on  the  busi¬ 
ness  process  rather  than 
on  the  technology.  They  are 
driven  by  a  business  man¬ 
date,  either  bom  out  of  a  regulatory  requirement  or  an  internal 
need,  Keisling  says. 

“Our  business  partners  have  absolutely  no  bias  in  terms  of 
the  tool  we  use,  but  they  have  a  strong  bias  toward  seeing  that 
we  deliver  results,”  he  says. 

Wyeth’s  BPM  initiative  aims  to  fill  in  the  gaps  between  sys¬ 
tems,  promoting  smooth  hand-offs  from  one  to  the  next,  and 
shifting  more  of  the  responsibility  for  defining  processes  to  busi¬ 
ness  analysts,  rather  than  programmers.  Although  the  emphasis 
is  as  much  on  the  business  processes  as  the  technologies  to  enable 
them,  products  such  as  the  Metastorm  BPM  Suite  (which  is  used 
at  Wyeth)  help  by  offering  a  combination  of  visual  process  mod¬ 
eling,  process  modeling,  workflow,  automation  and  integration 


tools.  The  BPM  software  can  orchestrate  processes  that  cross 
multiple  computer  systems,  taking  advantage  of  Web  services 
and  other  integration  technologies  to  route  transactions  from 

one  system  to  the  next. 

Another  important  goal 
of  implementing  BPM  is  to 
identify  parts  of  a  business 
process  that  aren’t  auto¬ 
mated.  Often,  these  are  choke 
points  where  an  employee 
is  responsible  for  taking  the 
information  from  one  sys¬ 
tem,  performing  a  manual 
task  or  analysis  requir¬ 
ing  human  judgment,  and 
then  kicking  off  a  process 
in  another  system.  In  these 
cases,  the  BPM  tool  itself  can 
provide  e-mail  notifications 
and  reminders,  in  combina¬ 
tion  with  Web-based  forms, 
to  prompt  workers  to  per¬ 
form  those  tasks  and  keep 
things  moving. 

This  layer  of  workflow 
automation  also  provides 
visibility  into  processes 
that  otherwise  would  occur 
away  from  the  watchful 
eyes  of  corporate  informa¬ 
tion  systems.  Since  Wyeth 
is  in  the  highly  regulated 
drug  development  business,  having  better  documented  pro¬ 
cesses  and  auditing  of  how  they  are  carried  out  could  help  the 
company  in  its  dealings  with  regulators. 

BPM  is  also  helping  Wyeth  improve  the  efficiency  of  routine 
administrative  processes.  For  example,  one  of  its  BPM  initiatives 
is  related  to  research  projects  that  Wyeth  conducts  with  the  help 
of  physicians.  Rather  than  dealing  with  regulated  medical  data,  it 
is  focused  on  improving  the  interactions  between  Wyeth  Medi¬ 
cal  professionals  and  the  clinicians  they  work  with  around  the 
world.  The  BPM  solution  provides  significantly  improved  lev¬ 
els  of  management,  collaboration  and  timeliness  of  managing 
these  clinical  research  studies.  Previously,  Wyeth  R&D  person¬ 
nel  used  a  variety  of  systems  and  tools  to  track  the  activities  of 
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Business  Process  Management 


clinical  investigators,  including  the  number  of  patients  seen 
and  whether  their  reports  on  those  patients  met  the  require¬ 
ments  of  the  research  protocol.  Clinical  grant  payments  were 
also  handled  in  multiple  ways  by  the  research  teams  at  Wyeth, 
leading  to  a  payment  request  in  SAP.  Using  the  BPM  tool,  Wyeth 
can  now  introduce  business  rules  to  initiate  the  workflow  for 
seeking  approval  for  payments. 

“The  value  is  in  the  process  consistency.  Rather  than  relying 
on  individual  knowledge  to  make  sure  things  get  done,  we  can 
rely  on  an  automated,  documented  process  to  get  things  done,” 
says  Jazz  Tobaccowalla,  Wyeth’s  vice  president  of  information 
services,  the  technology 
group  that  supports  the 
R&D  division.  “This  is  par¬ 
ticularly  important  as  we’re 
going  more  global  with  our 
workforce  and  trying  to 
leverage  every  hour  avail¬ 
able  in  the  clock.  It  gives  us 
a  consistent  way  of  doing 
things  and  a  way  to  capture 
knowledge— everything  that 
we  can  lose  when  people 
leave  or  people  forget.” 

Bust  Silos  and 
Tie  Processes 
Together 

For  Wyeth,  the  decision 
to  focus  on  BPM  emerged 
from  an  analysis  of  where 
the  research  systems  group 
was  putting  its  energy.  “The 
group  I  inherited  had  a  big 
emphasis  on  software  devel¬ 
opment,  with  the  idea  that 
we  should  build  software 
from  scratch  where  pos¬ 
sible,”  says  Tobaccowalla. 

Tobaccowalla  shifted  the 

emphasis  to  buying  and  adapting  commercially  available  soft¬ 
ware.  Yet  the  classic  “build  versus  buy”  trade-off  was  only  part 
of  the  story.  He  also  came  to  the  conclusion  that  there  was  too 
much  emphasis  on  the  transaction  systems  and  too  little  on 
those  that  enabled  the  processes  that  were  valuable  to  the  com¬ 
pany.  “Development  was  focused  on  siloed,  transaction  systems. 
We  had  integration  technology  that  moved 
data  from  one  system  to  another,  but  we  did 
not  necessarily  tie  the  processes  across  these 
systems  together.  What  we  really  needed 
was  for  the  process  to  flow  with  the  data,” 

Tobaccowalla  says. 

In  the  R&D  division  particularly,  “there’s 
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certainly  a  greater  emphasis  on  efficiency,”  Tobaccowalla  says, 
“so  consistency  and  process  and  clarity  of  who  is  doing  what 
is  important.”  For  example,  the  BPM  system  can  include  pro¬ 
cess-monitoring  rules  that  detect  when  a  required  approval  is 
taking  too  long— perhaps  because  the  responsible  person  is  out 
sick— and  notify  another  manager. 

One  of  the  first  benefits  Wyeth  saw  from  R&D’s  BPM  initia¬ 
tive  was  that  software  development  time  was  cut  in  half.  Tobac¬ 
cowalla  says  that  on  the  average  project,  the  actual  software 
development  that  would  have  required  six  months  of  traditional 
programming  work  can  be  accomplished  in  about  three  months 

with  a  BPM  tool.  (This  does 
not  include  the  up-front  time 
spent  defining  how  the  pro¬ 
cess  should  work,  which  is 
sometimes  the  bigger  part 
of  a  project.)  So  while  he  had 
only  planned  to  tackle  three 
BPM  projects  in  2007,  he 
wound  up  with  eight  under 
way  by  the  end  of  the  year. 

Even  so,  Tobaccowalla 
says  he  has  not  found  that 
BPM  completely  eliminates 
the  need  for  a  software 
development  effort  on  his 
projects.  While  a  business 
analyst  can  do  more  of  the 
up-front  work  of  defining 
a  business  process,  there  is 
still  “a  little  bit  of  classic  IT 
effort”  to  integrate  the  sys¬ 
tems  that  must  work  with 
the  BPM  software. 

Wyeth  has  also  relied  on 
consultants  with  expertise 
at  configuring  the  Metas¬ 
torm  software  to  produce  the 
actual  process  models,  which 
is  still  a  little  too  much  like 
programming  for  the  average  business  user.  However,  Tobaccow¬ 
alla  says  Wyeth  is  planning  to  purchase  Metastomi’s  Provision 
tool,  which  is  designed  to  be  a  more  business-user-friendly  tool  for 
visual  process  design  and  reengineering,  with  the  ability  to  gener¬ 
ate  models  that  can  be  imported  into  the  BPM  environment. 

“Maybe  with  that,  some  of  the  hand-offs  will  become  easier, 
and  some  of  the  simpler  automations  we’ll 
be  able  to  do  with  the  click  of  a  button,” 
he  says. 


Success  Speeds  Adoption 

The  R&D  group’s  success  with  BPM  has 
attracted  attention  from  other  parts  of 
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“When  you  have  a  good  experience  with  a  deployment,  and  it’s  on 
time  and  on  budget,  the  uptake  is  very  good.  The  heads  of  other 
departments  start  looking  at  it  and  saying,  'I  want  one  of  those,’” 

-IDC  ANALYST  MAUREEN  FLEMING 


Wyeth.  In  fact,  Tobaccowalla  is  in  the  process  of  establishing  a 
BPM  Center  of  Excellence  (COE)  as  a  way  for  his  staff  to  advise 
their  business  peers  how  to  use  the  technology  effectively. 
That’s  significant  because  “we  don’t  establish  COEs  very  eas¬ 
ily,”  he  says.  In  other  words, 
the  company  doesn’t  devote 
those  resources  to  every 
new  technology  fad  that 
comes  along,  only  to  things 
it  believes  are  strategically 
important. 

IDC  analyst  Maureen 
Fleming  wrote  a  research 
report  on  Metastorm  that 
included  a  case  study  on 
Wyeth  (IDC  is  a  sister  com¬ 
pany  to  CIO’s  publisher). 

She  says  some  companies 
who  adopt  BPM  start  with 
a  grand  vision  for  gaining 
better  control  over  all  their 
business  processes.  Oth¬ 
ers,  like  Wyeth,  start  with 
a  specific  application  that 
happens  to  be  a  good  match 
for  BPM.  What  can  happen 
then,  if  all  goes  well,  is  that 
the  approach  goes  “viral” 
and  starts  marketing  itself. 

“When  you  have  a  good 
experience  with  a  deploy¬ 
ment,  and  it’s  on  time  and  on 
budget,  the  uptake  is  very 
good.  The  heads  of  other  departments  start  looking  at  it  and 
saying,  ‘I  want  one  of  those,”’  Fleming  says.  “And  I  think  that’s 
what  happened  here,  where  the  outcome  was  viral  demand 
inside  of  Wyeth.” 

Tobaccowalla  says  that  Wyeth  originally  hesitated  over  the 
decision  of  whether  or  not  to  license  the  Metastorm  suite.  An 
internal  technology  review  committee  questioned  the  need  for 
the  suite,  given  that  the  company  already  had  several  other 
products  such  as  Documentum  and  SAP  at  its  disposal  with 
workflow  capabilities.  Ultimately,  the  project  team  was  able 
to  make  the  case  that  BPM  went  beyond  traditional  workflow 
to  manage  processes  that  have  to  span  multiple  systems  and 
that  the  tools  had  enough  potential  applications  to  be  worth 


adding  to  the  company’s  existing  technology  portfolio. 

Wyeth’s  BPM  initiative  beginning  in  R&D  is  surprising  to 
Pramod  Sachdeva,  managing  director  of  Princeton  Blue,  a  sys¬ 
tems  integration  firm  that  targets  the  pharmaceutical  industry. 

“This  is  starting  on  the  R&D 
side?  I  think  that’s  tremen¬ 
dous,”  he  says,  explaining 
that  R&D  technology  groups 
are  often  too  focused  on  spe¬ 
cialized  informatics  tech¬ 
nologies  to  pay  attention  to 
BPM.  And  that’s  too  bad. 
“There’s  so  much  value  to  be 
created  on  the  R&D  side  in 
pharmaceutical  companies” 
where  BPM  could  make  a 
difference,  he  says. 

Potential  customers  tend 
to  be  skeptical  of  claims 
made  for  BPM  that  “sound 
too  good  to  be  true,”  Sach¬ 
deva  says.  But  it’s  coming 
into  its  own  as  a  technology 
and  a  discipline.  What’s 
changed  is  the  quality  of 
the  tools,  which  simplifies 
the  integration  required  to 
orchestrate  processes  across 
multiple  systems.  “It’s  only 
in  the  last  two  to  three 
years  that  I’ve  felt  these 
products  have  reached  the 
level  where  they  can  truly 
bring  value  to  the  business— and  not  just  be  another  tool  for 
IT,”  Sachdeva  says. 

Still,  the  tools  can  only  do  so  much.  Implementing  BPM  can  be 
a  way  of  identifying  and  addressing  the  gaps  in  a  process  that  cuts 
across  divisions.  But  those  in  charge  of  the  different  divisions  still 
have  to  agree  on  how  the  new,  automated  process  should  work, 
Tobaccowalla  says. 

Lacking  that,  the  result  is  likely  to  be  “a  layer  of  bureaucracy 
that  nobody  is  interested  in,”  he  says.  “So  the  real  magic  is  getting 
the  business  process  right.”.  BE! 


David  F.  Carr  is  a  freelance  writer,  editor  and  Web  developer.  To  com¬ 
ment  on  this  story,  go  to  www.cio.com/article/375067 . 
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Survey  shows  that 
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B  When  selecting  the  best  enterprise  communications 
*■  delivery  model,  CIOs  are  making  crucial  trade-offs 
between  control  and  the  freedom  to  focus  on  core 
business  activities. 


faster  deployment  and  having  service-level  agreements 
(SLAs)  in  place  to  measure  service  delivery. 


SURVEY 

RESPONDENTS 

say: 


78%  cite  more 
control  as  the 
top  benefit  of 
on-premise 
deployment. 


Nothing  is  more  important  in  business  than  com¬ 
munication  and  the  technology  that  best  enables  it. 
Fortunately,  when  it  comes  to  reliable  implementation 
and  delivery,  CIOs  have  compelling  choices— from  self- 
maintaining  the  technology  on-premise,  to  outsourcing 
that  responsibility  to  a  trusted  third  party  in  a  hosted  or 
managed  services  model.  Which  is  the  best  path?  CIOs 
must  consider  both  current  and  future  business  needs, 
taking  into  account  their  organization's  unique  chal¬ 
lenges  and  today’s  competitive  business  environment. 

“CIOs  are  naturally  cautious  in  regard  to  the  selection 
of  communication  technology,”  says  Joseph  Staples, 
senior  vice  president  of  worldwide  marketing  at 
Indianapolis,  Ind. -based  Interactive  Intelligence.  “Inad¬ 
equate  communication  capabilities  can  often  equate 
to  reduced  revenues.  In  contrast,  effective  communi¬ 
cation  strategies  can  give  businesses  a  leg  up  on  the 
competition.  So  CIOs’  decisions  around  what  products 
to  implement  and  how  to  deploy  them  are  critical.” 


74%  cite  reduced 
IT  burden  as  the 
top  benefit  of 
managed  service 
deployment. 


47%  indicate  that 
the  ability  to 
migrate  between 
delivery  models 
is  critical  or  very 
important. 


That  said,  a  recent  study  by  IDG  Research  Services  re¬ 
veals  that  the  on-premise  model  dominates  enterprise 
communications  environments.  A  majority  of  respon¬ 
dents  use  this  model  for  messaging  (84  percent),  the 
contact  center  (71  percent)  and  business  telephony 
(81  percent).  Only  about  15  to  20  percent  are  using  a 
managed  service  provider  for  these  communications 
environments,  and  even  fewer  use  a  hosted  service. 

The  Trade-Off:  Control  vs.  Freedom 

There  are  distinct  advantages  to  using  one  mode!  over 
another.  When  respondents  think  about  managed  or 
hosted  services,  they  worry  about  maintaining  control 
over  their  data  or  company  image  and  the  increased 
security  risk.  Those  concerns  often  lead  them  to  on¬ 
premise  deployments. 


Conversely,  respondents  say  that  managed  and  hosted 
service  methods  can  address  the  pain  points  that  may 
accompany  on-premise  deployment.  Some  of  the  top 
benefits  associated  with  using  a  managed  service 
provider  or  a  hosted  service— often  referred  to  as  a 
software-as-a-service  (SaaS)  model— are  a  reduced 
burden  on  IT  staff  and  resources,  lower  upfront  costs, 


“Clearly,  it  all  comes  down. to  trade-offs,”  says  Staples. 
“The  on-premise  path  provides  control  and  security, 
while  outsourcing  options  free  enterprises  to  focus  on 
their  core  business  initiatives.” 

Outsourcing  decisions  are  often  perceived  as  a  simple 
numbers  game.  However,  the  cost  issue  can  be  deceiv¬ 
ing,  Staples  warns,  as  hosting  options  may  actually  cost 
more  in  the  long  run.  “Don’t  be  fooled  into  thinking  that 
hosted  is  always  the  best  way  to  save  money;  there’s 
a  much  more  complex  financial  equation  involved,”  he 
says.  “It's  important  to  look  at  upfront  implementa¬ 
tion  costs,  maintenance  charges,  contract  length  and 
change  fees,  in  addition  to  the  monthly  user  fees.” 


What's  Best  Today  May  Not  Be  Best  Tomorrow 

In  the  end,  CIOs  aren’t  committing  to  one  model.  The 
survey  results  show  that  despite  the  strong  rally  around 
on-premise  solutions,  there  is  a  trend  toward  hosted  and 
managed  options.  Almost  one-third  of  respondents  say 
that  hosted  services  have  gained  traction  over  the  other 
methods  in  the  past  12  months,  while  11  percent  say  they 
see  more  movement  toward  managed  services. 

What’s  telling  is  that  nearly  half  of  the  respondents  say 
the  ability  to  seamlessly  migrate  from  one  model  to 
another  is  critical  or  very  important.  Staples  says  this  is 
an  important  consideration  given  that  any  business  can 
look  dramatically  different  24  months  down  the  road.  A 
growth  spurt,  merger  or  acquisition,  or  even  a  change 
in  management  philosophy  can  warrant  a  move  to  a 
new  delivery  model 

"Enterprises  must  be  prepared  to  adapt  to  such  chang¬ 
es  without  a  disruption  to  their  business,”  he  says.  "So 
it’s  important  to  work  with  technology  partners  that 
can  enable  that  transparent  migration  from  one  model 
to  another  as  business  needs  evolve.” 

Go  to  www.cio.com/whitepapers/inin-comm  to  obtain 
a  free  download  of  the  research  results  with  insightful 
commentary  from  key  respondents. 
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HOW  SMALL  COMPANIES 

CANMAKEABIGIMPACTWITH 


The  IT  Infrastructure 
Library’s  best  practices 
and  processes  help 
organizations  get  value 
from  their  information 
systems.  But  you  don’t 
have  to  be  a  big  global 
company  to  benefit. 

BY  MALCOLM 
WHEATLEY 


WHEN  MICHAEL  ARMSTRONG,  CIO  OF  THE  CITY  OF 

Corpus  Christi,  Texas,  wanted  to  improve  the  productivity  of  his  IT  team, 
ITIL  was  high  on  the  agenda. 

“We  needed  to  get  to  a  point  where  we  could  do  more  planned  work, 
which  meant  fighting  fewer  fires,”  he  says.  “And  to  me,  that  meant  getting 
a  better  handle  on  the  changes  that  were  taking  place.” 

Armstrong  had  read  that  80  percent  of  system  failures  are  due  to 
change,  and  80  percent  of  the  “time  to  fix”  lay  in  establishing  just  what 
changes  had  taken  place.  Corpus  Christi,  he  suspected,  was  no  different. 
Enter  ITIL,  which  Armstrong  knew  addressed  not  only  change  manage¬ 
ment  but  a  host  of  other  factors  that  affected  service  management  and 
the  productivity  of  the  city’s  IT  staff. 

Originally  developed  in  the  U.K.  in  the  mid-1980s,  the  Information 
Technology  Infrastructure  Library,  or  ITIL,  is  a  set  of  best-practice 
concepts  and  techniques  for  addressing  the  effective  management  of  IT 
infrastructure,  service  delivery  and  sup¬ 
port.  Endorsed  by  the  U.K.  government 
for  public-sector  IT  projects,  ITIL  soon 
gained  traction  within  the  corporate 
sector.  Published  by  the  Office  of  Gov¬ 
ernment  Commerce,  ITIL  initial  best- 
practice  guidelines  have  been  widely 
adopted  around  the  world,  although 


Reader  ROI 

::  Why  ITIL  isn't  just  for  large 
organizations  anymore 

::  How  smaller  companies  can 
implement  ITIL 

::  IT  leaders  share  ITIL 
adoption  experiences 
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exact  numbers  are  unclear.  (All  one  has  to 
do  is  purchase  a  set  of  ITIL  books  and  adopt 
whatever  ITIL  practices  one  wishes.) 

But  along  the  way,  ITIL  has  undeniably 
picked  up  a  reputation  for  being  more  appro¬ 
priate  for  big  business  rather  than  small-  and 
medium-size  IT  shops.  And  this,  in  turn,  has 
hindered  its  adoption  by  smaller  IT  organi¬ 
zations  such  as  Corpus  Christi’s.  Armstrong 
saw  past  that  big-business  stereotype  and 
envisaged  ITIL  easing  the  lot  of  the  city’s  five 
telephone  technicians,  nine  field  technicians, 

30  analysts  and  1,600  end  users. 

“ITIL  hasn’t  really  talked  to  smaller  busi¬ 
nesses,”  says  Barclay  Rae,  former  professional 
services  director  of  Europe’s  Help  Desk  Insti¬ 
tute  (now  known  as  the  Service  Desk  Institute). 

“The  language  to  date  has  been  very  much 
framed  in  the  context  of  large  organizations 
with  mainframes  and  internal  customers.” 

But  although  ITIL’s  big-business  creden¬ 
tials  can’t  be  denied,  there’s  growing  evidence 
that  it  can  indeed  benefit  the  smaller  IT  shop, 
too.  In  fact,  the  smaller  IT  shop  can  turn  its  size 
into  an  ITIL  asset,  says  Rae. 

“Smaller  companies  can  implement  ITIL— 
and  implement  it  quickly,”  he  says.  “There  are 
fewer  people  to  disagree  about  it,  and  it’s  easier 
to  get  the  key  people  around  the  same  table. 

I’ve  implemented  ITIL  in  an  IT  department  of 
just  six  people:  They  initially  complained  that 
they  didn’t  have  the  time— but  by  picking  just 
the  key  ITIL  processes,  it  didn’t  take  up  much 
time  at  all.” 

THE  NEED  FOR  ACCOUNTABILITY 

ITIL’s  processes  don’t  manage  themselves,  however.  “As  with 
all  good  process  development,  it’s  vital  to  have  a  process  ‘owner’ 
and  someone  who  is  responsible  for  ensuring  that  each  process 
is  working  well,”  warns  Rae. 

Take  consulting  engineers  Cundall,  Johnston  &  Partners 
of  Newcastle,  U.K.  Cundall  has  an  IT  department  of  10  people 
supporting  500  employees  across  13  main  offices  spread  over 
six  countries,  including  Dubai,  China,  Spain  and  Romania.  It 
adopted  a  service  management  solution  from  ICCM,  precisely 
because  of  the  ITIL-compliant  nature  of  the  U.K.  vendor’s  offer¬ 
ing,  explains  Cundall’s  IT  director,  Mike 
Hanna. 

Hanna  says  he  was  specifically  recruited 
to  move  the  firm  away  from  the  “break-fix” 
approach  to  technology  in  which  it  was 
mired.  ITIL’s  core  processes,  such  as  inci¬ 
dent  management,  change  management 


and  problem  management,  offered  a  way  to 
get  a  handle  on  what  was  really  going  on.  At 
Cundall,  Hanna  charged  staff  members  with 
ownership  of  those  processes.  The  incident 
management  process  at  Cundall  is  the  respon¬ 
sibility  of  service  support  manager  George 
Smith.  Change  management,  which  began  in 
May,  is  the  responsibility  of  a  new  hire,  Rita 
Testa,  recruited  for  her  ITIL  experience. 

But  implementing  ITIL  need  not  mean 
expanding  the  workforce,  notes  Rae.  Whether 
a  CIO  chooses  to  allocate  people  to  ITIL  pro¬ 
cesses  is  a  matter  of  individual  choice. 

“One  of  the  most  common  misunderstand¬ 
ings  about  ITIL  in  smaller  businesses  is  that 
ITIL  somehow  ‘demands’  a  large  organization: 
People  think  that  as  there  are  a  number  of  ‘man¬ 
agement’  processes  involved,  there  must  be  a 
similar  number  of  management  roles— but  this 
just  isn’t  the  case,”  he  says.  “Many  good  imple¬ 
mentations  have  simply  given  out  key  respon¬ 
sibilities  to  individuals  as  part  of  their  existing 
roles.” 

0 N  E  S I Z E  DOESN’T  FIT  ALL 

Where  to  start  with  ITIL  and  where  to  stop  are 
also  matters  of  choice.  For  the  city  of  Corpus 
Christi,  for  instance,  the  change  management 
process  has  been  the  starting  point.  In  CIO 
Armstrong’s  eyes,  that  is  where  the  greater 
reward  lies.  “The  incident  management  piece 
of  the  puzzle  is  important,”  he  acknowledges, 
“but  that  comes  next.” 

“The  incremental  approach  [to  ITIL]  is  very  common,  and 
is  one  that  we  see  generally  giving  the  best  results  with  smaller 
organizations,”  says  Graham  Ridgway,  CEO  of  Touchpaper, 
the  U.K.  supplier  of  the  service  management  solution  adopted  by 
the  city.  “More  usually,  organizations  start  with  incident  man¬ 
agement  rather  than  change  management,  but  it’s  very  much  a 
question  of  individual  preferences.” 

So  is  where  to  stop.  At  Cundall,  fully  certified  ITIL  compliance 
“is  not  a  short-term  goal,”  stresses  IT  director  Hanna.  “The  aim  is  to 
move  closer  to  full  compliance,  and  then  take  a  view  as  to  whether 
we  want  to  go  the  extra  mile.  From  where  we  are  today,  70  per¬ 
cent  to  80  percent  compliance  should  make  life  so  much  easier.” 
Accreditation,  in  other  words,  is  a  nice-to-have,  not  a  must-have. 

Corpus  Christi’s  Armstrong  is  more 
outspoken.  “We’re  not  doing  ITIL  just  for 
the  sake  of  saying  we’ve  done  it.  And  I’m 
not  interested  in  certification,”  he  says. 
“What  I  am  interested  in  is  providing  a 
better  service  to  our  internal  customers, 
and  we  simply  don’t  have  the  resources 


ITIL  CAN 
WORK  FOR 
YOU,  TOO 

Points  to  consider 

The  IT  Infrastructure 
Library  (ITIL)  is  applicable 
to  small-  and  medium-size 
organizations.  Consider 
these  points  when  decid¬ 
ing  whether  it’s  right  for 
you: 

1  Don't  be  daunted. 

Remember  that  ITIL  can 
work  for  smaller  compa¬ 
nies.  Even  if  the  processes 
were  written  with  big  com¬ 
panies  in  mind,  the  lessons 
also  apply  to  smaller  orga¬ 
nizations. 

2  Appoint  a  process 
owner.  You  need  a  leader 
in  charge. 

3  Pick  your  pieces 

and  prioritize.  It’s  OK  to 
select  aspects  of  ITIL  and 
not  the  whole  thing.  Pick 
up  the  points  you  think  will 
work  best  for  your  organi¬ 
zation.  -M.W. 


More  ITIL  Advice 


For  ideas  on  how  to  GET  YOUR  STAFF  TO 
ADOPT  ITIL,  read  The  Practical  Value  of  the 
IT  Infrastructure  Library  at  www.cio.com/ 
article/110156. 
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to  do  it  any  other  way.” 

Such  flexibility  is  important,  adds  John  Noctor,  senior  con¬ 
sultant  at  ICCM,  provider  of  the  service  management  solution 
chosen  by  Cundall.  “Around  ITIL,  you  hear  the  words  adapt 
and  adopt  a  lot,”  he  says.  “It’s  a  suggested  framework,  not  a  man¬ 
datory  one:  You  pick  the  bits  that  suit  you  best.” 

Even  so,  the  level  of  adaptation  is  diminishing  as  ITIL  itself 
becomes  more  accessible  to  smaller  organizations.  Published  in 
2006,  the  Office  of  Government  Commerce’s  guide  to  small-scale 
ITIL  implementations  is  already  in  its  third  printing.  As  with  the 
Office’s  other  ITIL  publications,  it  is  published  by  government 
publisher  The  Stationery  Office  and  costs  around  $70.  (Exact 
pricing  depends  on  the  current  exchange  rate.) 

But  while  many  ITIL  practitioners  broadly  welcome  such 
moves,  they  stress  that  smaller  organizations  can  still  benefit 
from  working  with  the  full  set  of  ITIL  guidelines. 

“There’s  still  a  fair  degree  of  ignorance  among  smaller  busi¬ 
nesses  about  ITIL’s  potential  benefits,”  argues  Paul  Cash,  manag¬ 
ing  director  of  Partners  in  IT,  a  service  management  consultancy 
and  ITIL  training  provider.  If  more  small  IT  organizations  were 
aware  of  ITIL’s  benefits,  he  adds,  they  would  be  more  inclined  to 
adopt  the  full  guidelines  and  not  a  scaled-down  version. 

STAMINA  REQUIRED  TO  MEET  ITIL’S  DEMANDS 

One  smaller  business  that  has  done  just  that  is  U.K.-based  Ioko, 
a  300-employee  outsourced  managed  services  specialist  and 


developer  of  Internet-based  applications  for  global  giants  such 
as  Shell,  the  BBC  and  AT&T.  ITIL  appeared  on  Ioko’s  radar 
screen  in  2001,  explains  VP  of  Managed  Services  Sian  Hodgson: 
“We  had  ambitious  growth  targets  and  realized  that  we  needed 
processes  and  systems  that  scaled  as  we  grew.” 

With  ITIL’s  small-scale  version  not  yet  available,  Ioko  embarked 
on  a  full-scale  implementation— but  more  gradually,  implement¬ 
ing  ITIL  practices  at  the  pace  that  it  could  absorb  them. 

“You  need  stamina,”  stresses  Hodgson.  “You  need  to  recog¬ 
nize  that  it’s  a  journey  involving  hundreds  of  small  changes, 
rather  than  a  onetime  silver  bullet.  People  see  ITIL  as  some  sort 
of  Nirvana,  but  really  it’s  just  a  very  sensible  framework.  Take 
ITIL’s  approach  to  change  management:  It  provides  a  very  cred¬ 
ible  level  of  detail  around  the  processes  of  designing,  approving 
and  ultimately  implementing  change.” 

And  for  Ioko,  ITIL  has  delivered  on  its  promise,  adds  Hodg¬ 
son.  With  revenue  of  £9.1  million  in  2001  when  first  embarking 
on  ITIL,  Ioko  has  now  grown  to  sales  of  £34  million,  she  says. 
“And  we  haven’t  had  to  make  changes  to  our  processes,  because 
they  were  already  in  line  with  what  we  need,”  Hodgson  says. 
“What’s  more,  we  could  double  in  size— and  still  not  make  any 
changes.”  K3X3 


Malcolm  Wheatley  is  a  freelance  writer  who  is  living  in  Devon,  Eng¬ 
land.  To  comment  on  this  article,  go  to  www.cio.com/article/ 
201650. 
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Records  Management  That  Works 


The  2002  Sarbanes-Oxley  regulations  served  as 
a  wake-up  call  for  CIOs  to  formalize  document  retention 
policies  to  meet  compliance  requirements.  But  regulatory 
demands— and  the  number  of  documents  produced  daily— 
continue  to  grow.  So  a  solid  document  management  process 
is  a  necessity.  CIOs  struggle  with  creating  the  policies,  get¬ 
ting  buy-in  from  the  end  users  and  managing  the  technology. 
Members  of  the  CIO  Executive  Council,  who  meet  regularly 
to  discuss  compliance  approaches,  share  techniques  that 
have  made  document  retention  policies  work  for  them. 

Get  the  Policy  Right 

The  first  step  is  making  sure  that  the  right  items  are  covered 
in  your  document  management  policies.  For  this,  CIOs  can 
rely  on  business  peers,  outside  counsel  and  special  regula¬ 
tory  toolkits. 

“Initiating  a  high-level  review  of  our  document  reten¬ 
tion  policies  had  to  be  a  joint  effort  between  myself  and 
the  general  counsel.  If  we  weren’t  both  involved,  I  don’t 
know  how  the  effort  could  succeed,”  says  George  Wash¬ 
ington  University  CIO  Ron  Bonig.  For  instance,  GWU 
receives  subpoenas  and  e-discovery  requests  -around 
contracting  and  personnel  questions.  To  ensure  col¬ 
leagues’  participation  and  buy-in,  Bonig  stresses  the 
fiscal  importance  of  good  policies  and  compliance.  “The 
cost  to  the  university  in  a  federal  lawsuit  could  be  huge 


if  we  don’t  properly  address  retention,”  he  says.  “I  put  it 
in  dollars,  which  really  woke  people  up.” 

Strict  HIPAA  regulations  govern  patient  medical 
information  security  in  healthcare  organizations.  To  cre¬ 
ate  policies  consistent  with  those  rules,  Michael  Gaskin, 
director  of  information  services  at  Sequoia  Community 
Health  Centers,  purchased  a  HIPAA  security  toolkit. 
“The  toolkit  made  it  easy  for  me  to  review  documents 
and  know  what  I  must  include  in  my  plan,  ”  says  Gaskin. 
The  kit’s  workflow  examples  continue  to  inform  Gaskin 
about  compliance  needs  and  how  to  refine  his  document 
retention  policies. 

Balance  Stakeholder  Interests 

For  ArcelorMittal  Americas  CIO  Leon  Schumacher,  the 
challenge  is  making  sure  the  interests  of  different  stake¬ 
holders— users,  legal,  IT— are  considered  when  developing 
a  retention  policy.  “Each  has  specific  issues  that  they  want 
to  address.  Good  communication  before  and  during  such 
definition  phases  is  critical  for  success,”  he  says. 

The  delicate  balance  between  users’  storage  needs 
and  retention  guidelines  is  hard  to  strike.  For  example, 
Schumacher’s  team  created  management  policies  for  per¬ 
sonal  storage  limits,  including  how  much  e-mail  people 
can  maintain.  But  the  team  heard  complaints  that  users 
weren’t  getting  enough  Continued  on  Page  60 
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"Before  you  institute  a  policy, 
explain  it  to  10  random  people. 
If  seven  out  of  lO  agree,  then 
you've  got  the  policy  about  right  to 
fit  your  corporate  culture." 

RAJIV  JAIN,  SENIOR  VP  AND  CTO,  AMERICAN  GREETINGS  INTERACTIVE 
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Why  wait  to  get  the  benefits  of  unified  communications? 

The  OpenScape  UC  Suite  is  right  on  the  button.  It  is  proven  to 
speed  up  collaboration  and  decision  making,  and  seamlessly 
integrates  with  other  applications  like  Salesforce.com”  and 
Microsoft  Outlook?  With  Open  Communications  you  can 
have  it  all! 


Visit  our  new  microsite  today.  Start  right  now. 


Communication  for  the  open  minded 


www.siemens.com/us/open/now 
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[PEER  COUNSEL] 

Howto  Improve 
Records  Policy 

Ron  Bonig,  CIO,  George  Washington  Univer¬ 
sity,  and  Rajiv  Jain,  CIO,  American  Greet¬ 
ings  Interactive,  offer  the  following  advice 
on  how  to  craft  a  good  recordkeeping  policy: 

►  Properly  define  “document”  to  include 
information  of  all  types— electronic  or 
paper,  historical  or  transient  business 
record. 

►  Clearly  state  who  and  what  function  is  the 
relevant  retention  authority  for  the  most 
widely  used  categories  of  documents. 

►  Indicate  the  specific  duration  of  retaining 
different  types  of  documents. 

►  Identify  specific  staff  or  functions  with 
appropriate  read,  write  and  edit  access. 

►  Clearly  state  the  reasons  that  retention 
is  necessary  (e.g.,  Sarbanes-Oxley  rules, 
HIPAA  regulations).  As  those  require¬ 
ments  change,  the  rationale  for  retention 
should  be  reviewed  and  any  changes  to 
the  retention  period  should  be  made. 

►  State  that  if  a  file  or  folder  contains  mul¬ 
tiple  types  of  documents  necessary  for 
a  coherent  record,  then  the  whole  file  or 
folder  must  be  retained  for  the  duration  of 
the  longest-held  item. 

►  Except  when  absolutely  necessary,  do  not 
allow  (or  at  least  strongly  discourage)  the 
mixing  of  digital  documents  in  storage. 

If  document  A  needs  to  be  retained  for 
five  years  and  document  B  needs  to  be 
retained  for  20  years,  keep  them  separate. 
You  will  reduce  the  cost  of  long-term  stor¬ 
age  and  will  avoid  legal  risks  inherent  in  a 
failure  to  follow  retention  policies. 

►  Give  individual  divisions  or  offices  the 

authority  to  set  retention  policies  for  their 
own  operational  documents  if  approved 
by  or  coordinated  with  the  general  counsel 
or  compliance  office.  -C.M. 


fi 


Records  Management 

Continued  from  Page  58 


space.  Schumacher  responded  by  introducing  policies  at  two 
levels:  one  for  management,  which  gets  500MB  of  storage,  and 
one  for  general  users,  which  get  250MB.  The  team  is  working  on 
newer  archiving  solutions  to  further  ease  these  constraints. 

Plan  for  the  Long  Term 

Policies  must  cover  document  retention  over  a  long  period.  For  a  uni¬ 
versity,  this  is  a  huge  issue  given  the  length  of  time  it  must  keep  stu¬ 
dent  loan  data,  transcripts  and  other  federally  mandated  data.  “One  of 
the  issues  is  to  make  sure  that  the  documents  in  their  electronic  form 
can  be  upgraded  and  transitioned  from  one  technology  to  the  next 
over  decades,”  says  GWU’s  Bonig.  So  his  team  watches  the  storage 
landscape  to  stay  abreast  of  any  technology  that  would  necessitate  a 
business  decision  about  whether  to  transfer  retained  documents. 

Make  It  Pay 

A  good  document  retention  policy  can  do  more  than  avoid  legal 
fines.  At  American  Greetings  Interactive,  Senior  VP  and  CTO  Rajiv 
Jain  has  policies  to  archive  everything  on  the  desktop  and  retain 
all  executive  e-mails  indefinitely.  “Our  e-mail  retention  policy  has 
definitely  come  in  handy.  There  was  a  disagreement  over  the  fees 
associated  with  vendor  negotiation.  We  were  able  to  find  the  original 
archived  e-mail  from  the  vendor,  which  proved  that  we  were  right 
and  did  not  owe  the  amount  of  money  they  claimed,”  says  Jain. 

The  effort  to  build  and  enforce  good  document  polices  can  pro¬ 
vide  a  strategic  advantage. 

Most  of  GWU’s  back-office  staff  work  at  its  Virginia  campus 
30  miles  away.  Only  representatives  for  financial  aid,  undergrad 
admissions  and  other  student  offices  sit  in  the  D.C.-based  Student 
Union.  If  a  student  has  a  difficult  question,  the  rep  may  consult  a 

staff  expert  in  Virginia.  Now  they  can  look 
at  the  same  document  simultaneously, 
since  Bonig  and  his  team  are  digi¬ 
tizing  documents 
Leon  for  retention.  “We 

Schumacher  improved  our  busi¬ 
ness  process  dra¬ 
matically  and  can  confidently  say 
that  we  offer  student  services  from 
anywhere,”  says  Bonig.  rara 


Carrie  Mathews,  group  manager  of  member 
services,  can  be  reached  at  cmathews@cxo 
.corn.  To  comment  on  this  article,  go  to  www 
.cio.com/article/367164. 
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With  a  perfect  sightiine  to  your  entire  IT  portfolio  of  assets,  services,  resources  and  projects,  it's  easy  to  be  right  about  a  lot. 
CA's  approach  to  supporting  IT  governance  empowers  you  to  make  decisions,  investments  and  trade-offs  that  are  spot  on. 
The  truth  is,  people  are  drawn  to  that  kind  of  business  savvy.  But  not  to  worry,  you'll  get  used  to  all  the  attention.  Eventually. 
To  learn  more,  download  the  white  paper  "A  Matrixed  Approach  to  IT  Governance"  at  ca.com/itg. 
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I've  Learned 

THE  VOICE  OF  EXPERIENCE  *  AS  TOLD  TO 


William  Cohen, 

author  of  A  Class 
with  Drucker, 
shares  the  lessons 
in  leadership  and 
management  he 
learned  from  work¬ 
ing  with  the  great 
strategic  thinker 


Nothing  gets  done 
without  leadership. 
There  are  numerous 
instances  where  orga¬ 
nizations  with  inferior 
resources  and  manpower 
have  succeeded  against 
enormous  obstacles, 
including  much  stronger 
competitors  or  adversar¬ 
ies.  It  all  depended  on  the 
leader.  That’s  why  there’s 
the  old  saying:  It’s  better 
to  have  an  army  of  lambs 
led  by  a  lion  than  an  army 
of  lions  led  by  a  lamb. 


Drucker  predicted 
nearly  every  modern 
management  change. 
Peter  Drucker  was  a 
genius.  His  contributions 
extended  into  econom¬ 
ics  and  social  endeavors 
as  well  as  business  and 
nonprofit  management. 

Drucker invented 
management 
by  objectives 
(MBO)and 
showed 
execu¬ 
tives 
how 
to 


approach  problems  with 
their  ignorance  rather  than 
relying  on  their  knowledge 
and  experience.  He  also 
coined  the  term  "knowl¬ 
edge  worker"  to  define  the 
new  class  of  workers  that 
would  dominate  the  work¬ 
force  of  the  future. 

Every  individual  is 
different  and  cannot 
be  treated  the  same. 
As  a  young  manager,  I 
had  a  number  of  project 
managers  reporting  to 
me.  They  all  had  to  be  led 
in  different  ways.  Project 
Manager  A  required  every 
bit  of  information  about 
everything.  Project  Man¬ 
ager  B  was  the  opposite. 
Project  Manager  C  was 
so  contrary  that  I  almost 
transferred  him  to  a 
staff  position,  but  I  soon 
discovered  that  he  was 
an  outstanding  project 
manager  despite  his  con¬ 
trariness.  A  great  leader 
knows  how  to  bring  these 
different  personalities 
together,  and,  as  Drucker 
said,  "Staff  for  their 
strengths  and  make  their 
weaknesses  irrelevant." 

Don't  be  a  "one-min¬ 
ute"  manager. 

I  once  hired  an  individual 
who  took  longer  than  he 
should  have  with  certain 
assignments.  When  this 
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happened,  I  would  just  do 
a  “one-minute  correction" 
and  move  on.  But  things 
didn’t  improve.  During  his 
review,  he  told  me  I  was 
giving  him  projects  with 
time  conflicts.  I  promised 
to  give  him  more  informa¬ 
tion  on  time  priorities. 

He  was  right.  We  had  no 
more  problems,  so  six 
months  later  I  gave  him 
a  retroactive  raise  with 
back  pay.  This  taught  me 
that  when  things  go  awry, 
don’t  be  a  “one-minute 
manager."  Instead,  take 
the  time  to  sit  down  and 
find  out  what  is  going  on 
and  take  action  to  cor¬ 
rect  it. 

Good  leaders  use 
creativity  to  get  out 
of  tough  spots. 

A  good  leader  does  what 
ordinary  leaders  won’t  do. 
Consider  CEO  Ken  Iver¬ 
son  of  Nucor,  a  steel  com¬ 
pany  in  the  1980s  and 
’90s.  When  a  recession 
hit,  he  insisted  top  man¬ 
agers  take  pay  cuts  and 
he  took  one  himself.  Then 
he  went  to  a  three-day 
work  week  for  workers. 

At  the  end  of  a  three-year 
recession  he  hadn’t  laid 
off  a  single  employee. 


To  comment  on  this  article, 
go  to  www.cio.com/article/ 
340263. 
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Open.  Scalable.  And  now  fully  supported  by  Sun  around  the  globe. 

We’d  name  names,  but  the  copyright  police  would  get  out  their  whistles.  (Think  major  search  engines,  social 
networking  and  video  viewing  sites).  Let’s  just  say  the  cream  of  the  Web  2.0  crop  all  have  one  thing  in  common. 
They  run  MySQL™,  the  world’s  number  one  database  for  delivering  online  applications  -  and  now  backed  by 
Sun.  When  you  go  with  a  MySQL  Enterprise™  subscription,  you  get  unrivaled  production  support,  monitoring 
services  and  the  world’s  most  popular  open  source  database.  You  can  expect  a  TCO  reduction  of  up  to  90 
percent.  And  MySQL  Database  is  easy,  safe,  reliable  and  fast.  Find  out  why  thousands  of  corporations  trust  their 
online  practices  to  MySQL  and  Sun.  For  a  free  update  on  the  benefits  of  having  an  open  source  database,  call 
1  -866-221  -0634.  Then  download  a  free  30-day  trial  at  mysql.com/trials.  You’ll  be  able  to  say  with  confidence, 
‘My  company  is  ready  to  take  on  anything.’ 
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feels  the  beat.  Ideas  flow,  breakthroughs  happen,  markets  are  tapped— and  even  created. 

At  NetApp,  we’re  committed  to  bringing  you  storage  and  data  management  solutions  built 
to  keep  the  heart  of  your  business  beating  with  strength  and  efficiency.  Learn  how 
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